Approved changes feed: RSS · Atom

cpe:2.3:a:open62541:open62541:1.3:rc2-ef:*:*:*:*:*:*

part: a version: 1.3 update: rc2-ef

VendorOpen62541 (92d0f87b-cd1d-5aec-8b19-2cb171aefd91)
ProductOpen62541 (1c17c1ea-d4de-5c60-ada7-41b4e1717cd7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/logicals/open62541 purl2cpe 2026-06-01 10:12:47.005853
pkg:docker/open62541/open62541 purl2cpe 2026-06-01 10:12:47.005854
pkg:github/open62541/open62541 purl2cpe 2026-06-01 10:12:47.005855
pkg:rpm/fedora/open62541 purl2cpe 2026-06-01 10:12:47.005857
pkg:rpm/opensuse/open62541 purl2cpe 2026-06-01 10:12:47.005858

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-25761 vulnerable 2026-06-08 05:41:49.391839 Denial of Service (DoS)
HIGH (7.5)
The package open62541/open62541 before 1.2.5, from 1.3-rc1 and before 1.3.1 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk.
Published: 2022-08-23T05:07:11.545Z
Updated: 2024-09-16T20:12:46.712Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.