Approved changes feed: RSS · Atom

cpe:2.3:a:asyncua_project:asyncua:*:*:*:*:*:python:*:*

part: a version: * update: *

VendorAsyncua Project (3cfac2b4-1cf6-52d0-b3d5-eb6af02216de)
ProductAsyncua (692c8039-9931-5505-b58a-9799ae69e57f)
Edition*
Language*
Software edition*
Target softwarepython
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-25304 vulnerable 2026-06-08 05:41:45.692801 Denial of Service (DoS)
HIGH (7.5)
All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk.
Published: 2022-08-23T05:05:11.904Z
Updated: 2024-09-17T02:48:11.272Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.