The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: snyk
Published: 2022-08-23T05:07:40.316746Z
Updated: 2024-09-16T23:15:19.823Z
Reserved: 2022-02-24T00:00:00
Link: CVE-2022-25888
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-08-23T05:15:08.107
Modified: 2024-11-21T06:53:10.070
Link: CVE-2022-25888
Redhat
No data.