VULNERABILITY INTELLIGENCE

CVE-2022-24298

CVSS score7.5 HIGH

EPSS probability0.94%

CISA KEVNot currently listed

Published2022-08-23

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

All versions of package freeopcua/freeopcua are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.

Weakness classification

nvd@nist.gov: CWE-770

Primary references

report@snyk.io — Issue Tracking, Third Party Advisory
report@snyk.io — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory