CVE-2022-25231

Published
View on NVD ↗
CVSS v3
7.5
HIGH
CVSS v2
N/A
Affected
1
PROJECT

Description

The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) by sending a specifically crafted OPC UA message with a special OPC UA NodeID, when the requested memory allocation exceeds the v8’s memory limit.

Unlocking the Full Potential of OPC UA with Typescript and NodeJS - http://node-opcua.github.io/
GitHubGitHub
1.64K