CVE-2022-25888

The package opcua from 0.0.0 are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks e.g. 2GB each...

CVE-2022-25888

CVE-2022-25888 affects the Rust opcua crate (versions from 0.0.0 onward). The vulnerability is an uncontrolled DoS caused by no limit on the number of received chunks per session or across concurrent sessions; an attacker can flood with huge chunks (e.g., 2GB) without sending a Final chunk, leadi...

CVE-2022-25888

The package opcua from 0.0.0 are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks e.g. 2GB each...