7.5
Élevée
CVE-2022-25231 The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) by sending a specifically crafted OPC…
Description
The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) by sending a specifically crafted OPC UA message with a special OPC UA NodeID, when the requested memory allocation exceeds the v8’s memory limit.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| node-opcua 2.74 | premières → < 2.74.0 | 2.74.0 |