Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Denial of Service (DoS)
Vulnerability Description
All versions of package freeopcua/freeopcua are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
N/A
Vulnerability Title
FreeOpcUa 安全漏洞
Vulnerability Description
FreeOpcUa是开源 C++ OPC-UA 服务器和客户端库。 FreeOpcUa 存在安全漏洞,该漏洞源于在通过发送多个删除订阅参数等于 False 的 CloseSession 请求来绕过过多内存消耗的限制时,都容易受到拒绝服务 (DoS) 的攻击。
CVSS Information
N/A
Vulnerability Type
N/A