Описание
Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to close, which may lead to a denial-of-service condition on the OPC UA Tunneller (versions prior to 6.3.0.8233).
Ссылки
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 6.3.0.8233 (исключая)
cpe:2.3:a:honeywell:opc_ua_tunneller:*:*:*:*:*:*:*:*
EPSS
Процентиль: 60%
0.00403
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-754
CWE-754
Связанные уязвимости
github
больше 3 лет назад
Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to close, which may lead to a denial-of-service condition on the OPC UA Tunneller (versions prior to 6.3.0.8233).
EPSS
Процентиль: 60%
0.00403
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-754
CWE-754