GitHub Advisoryadvisory · NuGet
GHSA-782p-53wq-cxmj High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua
HIGH
Official page ↗
- Aliases
- CVE-2018-12086
- Ecosystem
- NuGet
- Packages
- OPCFoundation.NetStandard.Opc.Ua
- Severity
- High
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-787
- Reviewed
- 2020-06-16
Affected packages
• NuGet OPCFoundation.NetStandard.Opc.Ua: < 1.4.353.15 → fixed in 1.4.353.15
Description
Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.
Related
Alias · CVE (1)
- CVE-2018-12086 Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests. vulnerability
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2018-12086 advisory
- https://github.com/advisories/GHSA-782p-53wq-cxmj advisory
- https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12086.pdf web
- https://www.debian.org/security/2018/dsa-4359 web
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html web
- http://www.securityfocus.com/bid/105538 web
- http://www.securitytracker.com/id/1041909 web