CVE-2024-33862: OPCFoundation.NetStandard.Opc.Ua.Core buffer-management vulnerability
(updated )
A buffer-management vulnerability in OPC Foundation OPCFoundation.NetStandard.Opc.Ua.Core before 1.5.374.54 could allow remote attackers to exhaust memory resources. It is triggered when the system receives an excessive number of messages from a remote source. This could potentially lead to a denial of service (DoS) condition, disrupting the normal operation of the system.
References
- files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-33862.pdf
- github.com/OPCFoundation/UA-.NETStandard
- github.com/OPCFoundation/UA-.NETStandard/commit/52d4492ccc928f128e7a38857fdf58d94e1e652b
- github.com/OPCFoundation/UA-.NETStandard/releases/tag/1.5.374.54
- github.com/advisories/GHSA-4q2p-hwmr-qcxc
- nvd.nist.gov/vuln/detail/CVE-2024-33862
Code Behaviors & Features
Detect and mitigate CVE-2024-33862 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →