Opcua vulnerabilities
We track 3 vulnerabilities in Opcua products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 24, 2022.
Latest Opcua vulnerabilities
- 7.5 High severity
opcua: Out-of-bounds Write
The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) via the ExtensionObjects and Variants objects, when it allows unlimited nesting levels, which could result in a stack overflow even if the message size is less than the maximum allowed.
- 7.5 High severity
opcua: Allocation of Resources Without Limits or Throttling
The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited
- 7.5 High severity
opcua: Allocation of Resources Without Limits or Throttling
All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vul