libplctag Out-of-Bounds Read Vulnerability Allowing Buffer Overread via Network

A vulnerability allowing out-of-bounds read has been identified in the libplctag library, specifically in the unpack_response function within conn.c. This vulnerability exists in versions 2.0 through 2.6.3 and allows for buffer overreads via the network. When the function unpacks a malformed EtherNet/IP network packet, it can lead to a memory leak in the affected process.

Impact

Exploitation of this vulnerability causes a memory leak in the target process.

Remediation

Users are advised to update libplctag to version 2.6.4.