CVE-2024-10918
Fixed in a distro release EPSS <1%CVSS 4.8
Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries to reply to a Modbus request with an unexpected length.
Products: libmodbus
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | libmodbus | 3.1.6-2+deb11u1 |
| Debian 12 | libmodbus | 3.1.6-2.1+deb12u1 |
| Debian 13 | libmodbus | 3.1.11-1 |
| Debian 14 | libmodbus | 3.1.11-1 |
| Ubuntu 20.04 LTS | libmodbus | no fix |
| Ubuntu 22.04 LTS | libmodbus | no fix |
| Ubuntu 24.04 LTS | libmodbus | no fix |
| Ubuntu Pro 14.04 LTS | libmodbus | no fix |
| Ubuntu Pro 16.04 LTS | libmodbus | no fix |
| Ubuntu Pro 18.04 LTS | libmodbus | no fix |