Skip to content
Sign in
7.5 High

CVE-2022-25231 The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) by sending a specifically crafted OPC…

Description

The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) by sending a specifically crafted OPC UA message with a special OPC UA NodeID, when the requested memory allocation exceeds the v8’s memory limit.

Affected products and versions

Product Affected versions Fixed in
node-opcua 2.74 earliest → < 2.74.0 2.74.0

Other CVEs of node-opcua

The 3 CVEs of node-opcua →
CVE-2022-24375 The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) when bypassing the limitations for… 7.5 High CVE-2022-21208 The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number… 7.5 High
Track this CVE