Denial Of Service(DoS)

2023-10-0606:37:18

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

denial of service

asyncua

vulnerability

memory exhaustion

error handling

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

46.0%

JSON

asyncua is vulnerable to Denial Of Service (DoS). The vulnerability is due to data_received function in binary_server_asyncio.py which lacks proper error handling for malformed headers. An attacker can keep sending incomplete or malformed packets without a proper header and that cause memory exhaustion and potentially leads to DoS.