CVE-2022-24298

Name of the Vulnerable Software and Affected Versions freeopcua/freeopcua versions all

Description The issue allows for Denial of Service (DoS) by bypassing limitations for excessive memory consumption. This is achieved by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.

Recommendations For all versions, consider restricting access to the CloseSession request or implementing measures to limit excessive memory consumption as a temporary workaround until a patch is available.