Denial of Service (DoS) The advisory has been revoked - it doesn't affect any version of package libiec61850  (opens in a new tab)


Threat Intelligence

EPSS
0.94% (56th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CONAN-LIBIEC61850-10078774
  • published8 May 2025
  • disclosed24 Dec 2019
  • creditUnknown

Introduced: 24 Dec 2019

CVE-2019-19958  (opens in a new tab)
CWE-681  (opens in a new tab)
CWE-770  (opens in a new tab)

Amendment

This was deemed not a vulnerability.

Overview

Affected versions of this package are vulnerable to Denial of Service (DoS). In libIEC61850 1.4.0, StringUtils_createStringFromBuffer in common/string_utilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service.