GHSA-qpgc-xh7j-52q8HighCVSS 7.5

node-opcua DoS vulnerability via message with memory allocation that exceeds v8's memory limit

Published
August 24, 2022
Last Modified
January 30, 2023

🔗 CVE IDs covered (1)

CVE-2022-25231 →

📋 Description

The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) by sending a specifically crafted OPC UA message with a special OPC UA NodeID, when the requested memory allocation exceeds the v8’s memory limit.

🎯 Affected products1

  • npm/node-opcua:< 2.74.0

🔗 References (5)