GitHub Advisoryadvisory · NuGet

GHSA-5q2v-6j86-5h9v Security Update for the OPC UA .NET Standard Stack

HIGH Published 2022-06-17 Modified 2022-09-01 Official page ↗
Aliases
CVE-2022-29862
Ecosystem
NuGet
Packages
OPCFoundation.NetStandard.Opc.Ua.Core
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-835
Reviewed
2022-06-17

Affected packages

• NuGet OPCFoundation.NetStandard.Opc.Ua.Core: < 1.4.368.58 → fixed in 1.4.368.58

Description

A vulnerability was discovered in OPC UA .NET Standard Stack that allows a malicious client or server to cause a peer to hang with a carefully crafted message sent during secure channel creation.

Related

Alias · CVE (1)

  • CVE-2022-29862 An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message. vulnerability

Weakness · CWE (1)

  • CWE-835 Loop with Unreachable Exit Condition weakness

References