All errata/sisyphus/ALT-PU-2022-2511-2
ALT-PU-2022-2511-2

Package update libmodbus in branch sisyphus

Version3.1.7-alt1
Task#305858
Published2026-02-04
Max severityHIGH
Severity:

Closed issues (4)

CVE-2022-0367
HIGH7.8

A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.

Published: 2022-08-29Modified: 2025-11-03
CVSS 3.xHIGH 7.8
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
CVE-2024-36843
HIGH7.5

libmodbus v3.1.6 was discovered to contain a heap overflow via the modbus_mapping_free() function.

Published: 2024-05-31Modified: 2025-11-03
CVSS 3.xHIGH 7.5
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
CVE-2024-36844
HIGH7.5

libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx->backend pointer. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server.

Published: 2024-05-31Modified: 2025-11-03
CVSS 3.xHIGH 7.5
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References