Non notée
CVE-2021-43083 Apache PLC4X - PLC4C (Only the C language implementation was effected) was vulnerable to an unsigned integer underflow…
Description
Apache PLC4X - PLC4C (Only the C language implementation was effected) was vulnerable to an unsigned integer underflow flaw inside the tcp transport. Users should update to 0.9.1, which addresses this issue. However, in order to exploit this vulnerability, a user would have to actively connect to a mallicious device which could send a response with invalid content. Currently we consider the probability of this being exploited as quite minimal, however this could change in the future, especially with the industrial networks growing more and more together.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache PLC4X 0.9 | premières → 0.9.0 | Pas de correctif indiqué |
Références
- lists.apache.org lists.apache.org
- [oss-security] 20211220 CVE-2021-43083: Apache PLC4X 0.9.0 Buffer overflow in PLC4C via crafted server response www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache PLC4X
Les 5 CVE de Apache PLC4X →
CVE-2026-102511
Improper Verification of Source of a Communication Channel in the ADS discovery of the Go implementation of Apache PLC4X…
8.5
Élevée
CVE-2026-102510
Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size…
8.7
Élevée
CVE-2026-102509
Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursion in the…
8.7
Élevée
CVE-2026-102508
Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache…
9.2
Critique