Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the GetEndpoints process. An attacker can cause the server to allocate excessive memory by sending a GetEndpointsRequest with an extremely large endpointUrl field, delivered in...

EUVD-2022-30413

Malicious code in bioql PyPI...

Fedora 41 : open62541 (2024-821c085a14)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-821c085a14 advisory. Update to 1.4.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

CVE-2024-53429

CVE-2024-53429 affects Open62541 v1.4.6, where an assertion failure in fuzz_binary_decode can lead to a crash. Multiple sources (NVD, Debian, Fedora, Fedora advisory, and Nessus/NASL entries) confirm the vulnerable component and issue. Reported impact is a crash (no complete exploitation details ...

CVE-2022-25761

The package open62541/open62541 before 1.2.5, from 1.3-rc1 and before 1.3.1 are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an...

PT-2022-17497 · Open62541 · Open62541

Name of the Vulnerable Software and Affected Versions: open62541/open62541 versions 1.2.0 through 1.2.4 open62541/open62541 versions 1.3-rc1 through 1.3.0 Description: The issue is related to a Denial of Service DoS due to a missing limitation on the number of received chunks per single session o...

CVE-2020-36429

VariantencodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth...