Skip to main content

Allocation of Resources Without Limits or Throttling

CVE-2024-33862

High
7.5/10

Summary

A buffer-management vulnerability in the packages OPCFoundation.NetStandard.Opc.Ua and OPCFoundation.NetStandard.Opc.Ua.Core versions prior to 1.5.374.54, could allow remote attackers to exhaust memory resources. It is triggered when the system receives an excessive number of messages from a remote source. This could potentially lead to a Denial of Service (DoS) condition, disrupting the normal operation of the system.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-770 - Allocation of Resources Without Limits or Throttling

The software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References

Advisory Timeline

  • Published