com.digitalpetri.opcua:uanodeset-parser (0.4.0), com.festo.aas:p4m-helpers (>=1.0.0, <=1.0.4) +38 more potentially affected by CVE-2022-25897 via org.eclipse.milo:sdk-server (>=0.1.0, <=0.6.7)

org.eclipse.milo:sdk-server MAVEN version =0.1.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.2.1, =0.2.1, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2022-25897 Source advisory: OSV:GHSA-FPH9-F5R6-VHQF...

com.digitalpetri.opcua:uanodeset-parser (0.4.0), com.festo.aas:p4m-helpers (>=1.0.0, <=1.0.4) +38 more potentially affected by CVE-2022-25897 via org.eclipse.milo:sdk-server (>=0.1.0, <=0.6.7)

org.eclipse.milo:sdk-server MAVEN version =0.1.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.2.1, =0.2.1, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2022-25897 Source advisory: GHSA-FPH9-F5R6-VHQF...

CVE-2022-25897

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...

Design/Logic Flaw

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...

com.digitalpetri.opcua:uanodeset-parser (0.4.0), com.festo.aas:p4m-helpers (>=1.0.0, <=1.0.4) +38 more potentially affected by CVE-2022-25897 via org.eclipse.milo:sdk-server (>=0.1.0, <=0.6.7)

org.eclipse.milo:sdk-server MAVEN version =0.1.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.2.1, =0.2.1, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2022-25897 Source advisory: MEND:CVE-2022-25897...

CVE-2022-25897 Denial of Service (DoS)

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...

CVE-2022-25897

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...

CVE-2022-25897: Allocation of Resources Without Limits or Throttling

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False...

com.digitalpetri.opcua:uanodeset-parser (0.4.0), com.festo.aas:p4m-helpers (>=1.0.0, <=1.0.4) +38 more potentially affected by CVE-2022-25897 via org.eclipse.milo:sdk-server (>=0.1.0, <=0.6.7)

org.eclipse.milo:sdk-server MAVEN version =0.1.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.2.1, =0.2.1, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2022-25897 Source advisory: SNYK:JAVA-ORGECLIPSEMILO-2990191...