CVE-2022-0367

CVE-2022-0367

EPSS 0.4%CWE-119

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

29 Aug 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.

Affected products

n/a · libmodbus

References

https://bugzilla.redhat.com/show_bug.cgi?id=2045571 https://github.com/stephane/libmodbus/commit/b4ef4c17d618eba0adccc4c7d9e9a1ef809fc9b6 https://github.com/stephane/libmodbus/issues/614 https://lists.debian.org/debian-lts-announce/2022/09/msg00007.html https://lists.debian.org/debian-lts-announce/2025/03/msg00010.html