GitHub Advisoryadvisory · NuGet

GHSA-6fp8-cxc9-4fr9 Uncontrolled Resource Consumption in OPCFoundation.NetStandard.Opc.Ua.Core

HIGH Published 2022-06-17 Modified 2022-09-01 Official page ↗

Aliases: CVE-2022-29866
Ecosystem: NuGet
Packages: OPCFoundation.NetStandard.Opc.Ua.Core
Severity: High
Weaknesses: CWE-400
Reviewed: 2022-06-17

Affected packages

• NuGet OPCFoundation.NetStandard.Opc.Ua.Core: < 1.4.368.58 → fixed in 1.4.368.58

Description

A vulnerability was discovered in the OPC UA .NET Standard Stack that allows a malicious client to trigger a stack overflow exception in a server that exposes an HTTPS endpoint.

Alias · CVE (1)

CVE-2022-29866 OPC UA .NET Standard Stack 1.04.368 allows a remote attacker to exhaust the memory resources of a server via a crafted request that… vulnerability

Weakness · CWE (1)

CWE-400 Uncontrolled Resource Consumption weakness

References

https://github.com/OPCFoundation/UA-.NETStandard/security/advisories/GHSA-6fp8-cxc9-4fr9 web
https://nvd.nist.gov/vuln/detail/CVE-2022-29866 advisory
https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2022-29866.pdf web
https://github.com/OPCFoundation/UA-.NETStandard package