GitHub Advisoryadvisory · NuGet

GHSA-r7pq-3x6p-7jcm Memory Allocation with Excessive Size Value in OPCFoundation.NetStandard.Opc.Ua.Core

HIGH Published 2022-06-17 Modified 2022-09-01 Official page ↗
Aliases
CVE-2022-29863
Ecosystem
NuGet
Packages
OPCFoundation.NetStandard.Opc.Ua.Core
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-789
Reviewed
2022-06-17

Affected packages

• NuGet OPCFoundation.NetStandard.Opc.Ua.Core: < 1.4.368.58 → fixed in 1.4.368.58

Description

A vulnerability was discovered in the OPC UA .NET Standard Stack that allows a malicious client to cause a server to trigger an out of memory exception with a carefully crafted message.

Related

Alias · CVE (1)

  • CVE-2022-29863 OPC UA .NET Standard Stack 1.04.368 allows remote attacker to cause a crash via a crafted message that triggers excessive memory allocation. vulnerability

Weakness · CWE (1)

  • CWE-789 Memory Allocation with Excessive Size Value weakness

References