CVE-2021-45117: NULL Pointer Dereference

March 21, 2022 (updated September 5, 2022)

The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.

References

files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2021-45117.pdf
nvd.nist.gov/vuln/detail/CVE-2021-45117
www.youtube.com/watch?v=qv-RBdCaV4k

Code Behaviors & Features

Detect and mitigate CVE-2021-45117 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →