PT-2022-16588
CVE-2022-24298
·
تاريخ النشر
2022-08-23
·
تاريخ التحديث
2026-03-03
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
freeopcua/freeopcua versions all
Description
The issue allows for Denial of Service (DoS) by bypassing limitations for excessive memory consumption. This is achieved by sending multiple CloseSession requests with the
deleteSubscription parameter equal to False.Recommendations
For all versions, consider restricting access to the CloseSession request or implementing measures to limit excessive memory consumption as a temporary workaround until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾