debian/libmodbus vulnerabilities

Latest debian/libmodbus CVEs

Newest publication first

1. DLA-4084-1 libmodbus - security update

   Published 2025-03-11

   Unknown

2. CVE-2024-10918 Stack-based Buffer Overflow in libmodbus library

   Published 2025-02-27

   Medium·CVSS 4.8

   Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries to reply to a Modbus request with an unexpected length.

3. CVE-2024-36845 An invalid pointer in the modbus_receive() function of libmodbus v3.1.6 allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server.

   Published 2024-05-31

   Medium·CVSS 4.3

   An invalid pointer in the modbus_receive() function of libmodbus v3.1.6 allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server.

4. CVE-2024-36844 libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx->backend pointer. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-...

   Published 2024-05-31

   High·CVSS 7.5

   libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx->backend pointer. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server.

5. CVE-2024-36843 libmodbus v3.1.6 was discovered to contain a heap overflow via the modbus_mapping_free() function.

   Published 2024-05-31

   High·CVSS 7.5

   libmodbus v3.1.6 was discovered to contain a heap overflow via the modbus_mapping_free() function.

6. DLA-3098-1 libmodbus - security update

   Published 2022-09-04

   Unknown

7. CVE-2022-0367 A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.

   Published 2022-08-29

   High·CVSS 7.8

   A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.

8. DLA-2825-1 libmodbus - security update

   Published 2021-11-22

   Unknown

9. CVE-2019-14463 An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the MODBUS_FC_WRITE_MULTIPLE_REGISTERS case, aka VD-1301.

   Published 2019-07-31

   Critical·CVSS 9.1

   An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the MODBUS_FC_WRITE_MULTIPLE_REGISTERS case, aka VD-1301.

10. CVE-2019-14462 An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the MODBUS_FC_WRITE_MULTIPLE_COILS case, aka VD-1302.

    Published 2019-07-31

    Critical·CVSS 9.1

    An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the MODBUS_FC_WRITE_MULTIPLE_COILS case, aka VD-1302.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.