What is GHSA-vh4f-fgpp-x8x2?

GHSA-vh4f-fgpp-x8x2 is a security advisory published by GitHub Security Advisories with High severity. node-opcua DoS when bypassing limitations for excessive memory consumption

Which CVE IDs does GHSA-vh4f-fgpp-x8x2 cover?

GHSA-vh4f-fgpp-x8x2 covers the following CVE IDs: CVE-2022-24375. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vh4f-fgpp-x8x2?

GHSA-vh4f-fgpp-x8x2 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-vh4f-fgpp-x8x2?

GHSA-vh4f-fgpp-x8x2 affects 1 product, including: npm/node-opcua:\u003c 2.74.0.

GHSA-vh4f-fgpp-x8x2HighCVSS 7.5

node-opcua DoS when bypassing limitations for excessive memory consumption

Vendor

GitHub Security Advisories

Published

August 25, 2022

Last Modified

January 30, 2023

🔗 CVE IDs covered (1)

CVE-2022-24375 →

📋 Description

The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.

🎯 Affected products1

npm/node-opcua:< 2.74.0

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2022-24375
https://github.com/node-opcua/node-opcua/pull/1182
https://github.com/node-opcua/node-opcua/commit/3fd46ec156e7718a506be41f3916310b6bdd0407
https://github.com/node-opcua/node-opcua/commit/7b5044b3f5866fbedc3efabd05e407352c07bd2f
https://security.snyk.io/vuln/SNYK-JS-NODEOPCUA-2988725
https://github.com/advisories/GHSA-vh4f-fgpp-x8x2