GCVE - cpe:2.3:a:n/a:asyncua:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:asyncua:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	N/A (`22f567d3-1203-528c-8f0e-3eb9c2f6ca78`)
Product	Asyncua (`561d2cb4-433b-5bc2-b98d-a9156f1475a7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-26151`	vulnerable	2026-06-08 05:57:38.730417	Details available MEDIUM (5.3) Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory. Published: 2023-10-03T05:00:01.093Z Updated: 2024-09-20T14:16:00.651Z Open on db.gcve.eu Reference links https://security.snyk.io/vuln/SNYK-PYTHON-ASYNCUA-5673709 https://gist.github.com/artfire52/1540b234350795e0ecb4d672608dbec8 https://github.com/FreeOpcUa/opcua-asyncio/issues/1013 https://github.com/FreeOpcUa/opcua-asyncio/pull/1039 https://github.com/FreeOpcUa/opcua-asyncio/commit/f6603daa34a93a658f0e176cb0b9ee5a6643b262	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-26150`	vulnerable	2026-06-08 05:57:38.729219	Details available MEDIUM (6.5) Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication. Note: This issue is a result of missing checks for services that require an active session. Published: 2023-10-03T05:00:02.176Z Updated: 2024-09-20T14:15:27.187Z Open on db.gcve.eu Reference links https://security.snyk.io/vuln/SNYK-PYTHON-ASYNCUA-5673435 https://gist.github.com/artfire52/84f7279a4119d6f90381ac49d7121121 https://github.com/FreeOpcUa/opcua-asyncio/issues/1014 https://github.com/FreeOpcUa/opcua-asyncio/pull/1015 https://github.com/FreeOpcUa/opcua-asyncio/commit/2be7ce80df05de8d6c6ae1ebce6fa2bb7147844a	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25304`	vulnerable	2026-06-08 05:41:45.692203	Denial of Service (DoS) HIGH (7.5) All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk. Published: 2022-08-23T05:05:11.904Z Updated: 2024-09-17T02:48:11.272Z Open on db.gcve.eu Reference links https://security.snyk.io/vuln/SNYK-PYTHON-OPCUA-2988730 https://security.snyk.io/vuln/SNYK-PYTHON-ASYNCUA-2988731 https://github.com/FreeOpcUa/python-opcua/issues/1466	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.