Export limit exceeded: 18405 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2022-25903

Denial of Service (DoS)

The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) via the ExtensionObjects and Variants objects, when it allows unlimited nesting levels, which could result in a stack overflow even if the message size is less than the maximum allowed.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Opcua Project
Products
Opcua
CVE-2022-25888

Denial of Service (DoS)

The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Opcua Project
Products
Opcua
CVE-2022-25304

Denial of Service (DoS)

All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Asyncua Project Opcua Project
Products
Asyncua Opcua