Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory.
References
Link | Resource |
---|---|
https://gist.github.com/artfire52/1540b234350795e0ecb4d672608dbec8 | Exploit Third Party Advisory |
https://github.com/FreeOpcUa/opcua-asyncio/commit/f6603daa34a93a658f0e176cb0b9ee5a6643b262 | Patch |
https://github.com/FreeOpcUa/opcua-asyncio/issues/1013 | Exploit Issue Tracking Third Party Advisory |
https://github.com/FreeOpcUa/opcua-asyncio/pull/1039 | Patch |
https://github.com/FreeOpcUa/opcua-asyncio/releases/tag/v0.9.96 | Product Release Notes |
https://security.snyk.io/vuln/SNYK-PYTHON-ASYNCUA-5673709 | Exploit Patch Third Party Advisory |
Configurations
History
04 Oct 2023, 17:12
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
CWE | CWE-835 | |
First Time |
Freeopcua opcua-asyncio
Freeopcua |
|
CPE | cpe:2.3:a:freeopcua:opcua-asyncio:*:*:*:*:*:python:*:* | |
References | (MISC) https://github.com/FreeOpcUa/opcua-asyncio/pull/1039 - Patch | |
References | (MISC) https://github.com/FreeOpcUa/opcua-asyncio/commit/f6603daa34a93a658f0e176cb0b9ee5a6643b262 - Patch | |
References | (MISC) https://github.com/FreeOpcUa/opcua-asyncio/releases/tag/v0.9.96 - Product, Release Notes | |
References | (MISC) https://github.com/FreeOpcUa/opcua-asyncio/issues/1013 - Exploit, Issue Tracking, Third Party Advisory | |
References | (MISC) https://gist.github.com/artfire52/1540b234350795e0ecb4d672608dbec8 - Exploit, Third Party Advisory | |
References | (MISC) https://security.snyk.io/vuln/SNYK-PYTHON-ASYNCUA-5673709 - Exploit, Patch, Third Party Advisory |
03 Oct 2023, 05:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-10-03 05:15
Updated : 2023-12-10 15:14
NVD link : CVE-2023-26151
Mitre link : CVE-2023-26151
CVE.ORG link : CVE-2023-26151
JSON object : View
Products Affected
freeopcua
- opcua-asyncio