CVE-2022-24375

Denial of Service (DoS)

High · published August 24, 2022

CVSS v3.1
7.5
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P
CVSS v4.0
Not supplied
EPSS
0.01671 · 76.6th percentile
Published
2022-08-24T05:05Z
EPSS history
Timeline
  • 24 AUG 05:05Z
    Denial of Service (DoS)
    cvelistv5