CVE-2022-25897

Denial of Service (DoS)

Medium · published September 8, 2022

CVSS v3.1
5.9
EPSS
1%
Percentile
69.8
In the wild
Unconfirmed
What it is

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P
CVSS v4.0
Not supplied
EPSS
0.01277 · 69.8th percentile
Published
2022-09-08T05:05Z
EPSS history
Timeline
  • 08 SEP 05:05Z
    Denial of Service (DoS)
    cvelistv5