CVE-2022-24298

Denial of Service (DoS)

High · published August 23, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
60.5
In the wild
Unconfirmed
What it is

All versions of package freeopcua/freeopcua are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P
CVSS v4.0
Not supplied
EPSS
0.00938 · 60.5th percentile
Published
2022-08-23T05:06Z
EPSS history
Timeline
  • 23 AUG 05:06Z
    Denial of Service (DoS)
    cvelistv5