| Package | Affected versions | Patched versions |
|---|---|---|
| bro | ≤ 2.3.1 |
analyzer/protocol/dnp3/DNP3.cc in Bro before 2.3.2 does not properly handle zero values of a packet length, which allows remote attackers to cause a denial of service (buffer overflow or buffer over-read if NDEBUG; otherwise assertion failure) via a crafted DNP3 packet.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free