CVE-2018-18957

CRITICAL

libiec61850 1.3 - Stack-based Buffer Overflow in prepareGooseBuffer

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-18957. PoCs published by Dhiraj Mishra.

AI-analyzed exploit summary This exploit demonstrates a stack-based buffer overflow in libiec61850 1.3, triggered by passing a long interface name to the `goose_publisher_example` binary. The overflow occurs in `Ethernet_getInterfaceMACAddress` due to insufficient bounds checking.

Description

An issue has been found in libIEC61850 v1.3. It is a stack-based buffer overflow in prepareGooseBuffer in goose/goose_publisher.c.

Exploits (1)

exploitdb WORKING POC
by Dhiraj Mishra · textlocallinux
https://www.exploit-db.com/exploits/45798

This exploit demonstrates a stack-based buffer overflow in libiec61850 1.3, triggered by passing a long interface name to the `goose_publisher_example` binary. The overflow occurs in `Ethernet_getInterfaceMACAddress` due to insufficient bounds checking.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: libiec61850 1.3
No auth needed
Prerequisites: libiec61850 1.3 installed · access to execute `goose_publisher_example`
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/45798/
Exploit, Third Party Advisory x_refsource_misc
https://github.com/mz-automation/libiec61850/issues/83

Scores

CVSS v3 9.8
EPSS 0.1157
EPSS Percentile 95.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (1)
mz-automation/libiec61850 1.3
Published Nov 05, 2018
Tracked Since Feb 18, 2026