Skip to content
Sign in
7.5 High

CVE-2022-21208 The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number…

Description

The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk.

Affected products and versions

Product Affected versions Fixed in
node-opcua 2.74 earliest → < 2.74.0 2.74.0

Other CVEs of node-opcua

The 3 CVEs of node-opcua →
CVE-2022-24375 The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) when bypassing the limitations for… 7.5 High CVE-2022-25231 The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) by sending a specifically crafted OPC… 7.5 High
Track this CVE