Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Opcua Project Component: Opcua Clear all filters
TI-2022-09458 CVE-2022-25903 · GHSA-hgxq-hcrm-c5pm

Denial of service (DoS) in opcua

Priority LOW 36

The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) via the ExtensionObjects and Variants objects, when it allows unlimited nesting levels, which could result in a stack overflow even if the message si…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01428 Published 2022-08-24 Fixed in 0.11.0 CWE-787
TI-2022-09445 CVE-2022-25888 · GHSA-8mx2-gqx9-rm7f

Denial of service (DoS) in opcua

Priority LOW 36

The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01321 Published 2022-08-23 Fixed in 0.11.0 CWE-770
TI-2022-08997 CVE-2022-25304 · GHSA-mfpj-3qhm-976m

Denial of service (DoS) in opcua

Priority LOW 36

All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent se…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01374 Published 2022-08-23 Fixed in 0.9.96 CWE-770