CVE-2022-25304

All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited numb...

CVE-2022-25888

CVE-2022-25888 affects the Rust opcua crate (versions from 0.0.0 onward). The vulnerability is an uncontrolled DoS caused by no limit on the number of received chunks per session or across concurrent sessions; an attacker can flood with huge chunks (e.g., 2GB) without sending a Final chunk, leadi...

CVE-2022-25304

CVE-2022-25304 affects all versions of the Python OPC-UA stack OPC-UA and asyncua. The root cause is a missing limit on the number of received chunks per session and across concurrent sessions, enabling a Denial of Service by an attacker sending unlimited large chunks (e.g., 2GB) without a final ...