Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36986
HistorySep 09, 2022 - 2:16 a.m.

Denial Of Service (DoS)

2022-09-0902:16:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14

0.002 Low

EPSS

Percentile

60.9%

sdk-server is vulnerable to denial of service. The vulnerability exists because the maximum number of monitored items per session does not properly configure in the getMaxMonitoredItems function of OpcUaServerConfigLimits.java, allowing an attacker to cause an application crash by sending multiple CloseSession requests with the delete subscription parameter equal to false

CPENameOperatorVersion
sdk-serverle0.6.7
sdk-serverle0.6.7

0.002 Low

EPSS

Percentile

60.9%