Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks e....

CVE-2020-36429

VariantencodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth...

Out-of-bounds

VariantencodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth...

CVE-2020-36429

VariantencodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth...

CVE-2020-36429

Vulnerability summary: CVE-2020-36429 affects the OPC UA stack open62541, specifically the code path Variant_encodeJson in 1.x before 1.0.4. The issue is an out-of-bounds write resulting from deep recursion. What’s affected: open62541 1.x series prior to 1.0.4 (client/server code paths that encod...

CVE-2020-36429

VariantencodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth...

open62541 缓冲区错误漏洞

open62541 is an application software. An open source and free implementation of OPC UA OPC Unified Architecture, written in a common subset of the C99 and C++98 languages. A security vulnerability exists in open62541 prior to 1.0.4, which stems from the fact that X has out-of-bounds writes for...

open62541:fuzz_binary_message: Heap-use-after-free in UA_NodeMap_delete

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5642268793634816 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzbinarymessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

open62541:fuzz_binary_decode: Use-of-uninitialized-value in DiagnosticInfo_clear

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=4959778072428544 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzbinarydecode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

open62541:fuzz_binary_message: Heap-use-after-free in UA_NodeMap_delete

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5455621537923072 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash...

open62541:fuzz_binary_decode: Use-of-uninitialized-value in removeFromMap

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5748529321213952 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzbinarydecode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

open62541:fuzz_json_decode_encode: Use-of-uninitialized-value in jsmn_parse

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=4893066453057536 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecodeencode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

open62541:fuzz_binary_decode: Use-of-uninitialized-value in UA_encodeBinary

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6325617770102784 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzbinarydecode Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

open62541:fuzz_tcp_message: Stack-use-after-scope with empty stacktrace

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5733005242138624 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzztcpmessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Stack-use-after-scope WRITE 2 Crash...

open62541:fuzz_json_decode: Stack-use-after-scope in parseUnsignedInteger

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=4701111155163136 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Stack-use-after-scope READ 8 Crash...

open62541:fuzz_json_decode: Stack-use-after-scope in strtoll

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=4628081611636736 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzjsondecode Job Type: aflasanopen62541 Platform Id: linux Crash Type: Stack-use-after-scope WRITE 8 Crash Address:...

open62541:fuzz_binary_message: Crash in UA_Server_initNS0

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5751655076462592 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzbinarymessage Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

open62541:fuzz_tcp_message: Use-of-uninitialized-value in UA_Array_copy

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5740902795706368 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzztcpmessage Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

open62541:fuzz_mdns_xht: Use-of-uninitialized-value in txt2sd

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5657499161329664 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzmdnsxht Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

open62541:fuzz_json_decode_encode: Heap-use-after-free in NodeId_clear

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=5661308558245888 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsondecodeencode Job Type: libfuzzerasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash...