High severity · published Aug 23, 2022
CVE-2022-25761
The package open62541/open62541 before 1.2.5, from 1.3-rc1 and before 1.3.1 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks…
7.5
CVSS
1.4%
EPSS
No
On KEV
Description
The package open62541/open62541 before 1.2.5, from 1.3-rc1 and before 1.3.1 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FE
Fedora · Fedoraproject
37 · source: NVD
OP
Open62541 · Open62541
before 1.2.5; 1.3; 1.3; 1.3; 1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-25761
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-25761
Patch
https://github.com/open62541/open62541/commit/b79db1ac78146fc06b0b8435773d3967de2d659c
Patch
https://github.com/open62541/open62541/pull/5173
Release Notes
https://github.com/open62541/open62541/releases/tag/v1.2.5
Release Notes
https://github.com/open62541/open62541/releases/tag/v1.3.1
lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JNUV4FDVDBQHCPMOOEVKLMQK5SLKPK2L/
Patch
https://security.snyk.io/vuln/SNYK-UNMANAGED-OPEN62541OPEN62541-2988719
More from Fedora
10.0
CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
10.0
CVE-2015-3306
ProFTPD Improper Access Control Vulnerability
9.8
CVE-2024-4577
Argument Injection in PHP-CGI
9.8
CVE-2021-44026
Roundcube Webmail SQL Injection Vulnerability
9.8
CVE-2021-42013
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)