node-opcua DoS vulnerability via message with memory allocation that exceeds v8's memory limit

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-25231 · ADVISORY
• node-opcua/node-opcua#1182 · WEB
• node-opcua/node-opcua commit 7b5044b · WEB
• node-opcua/node-opcua · PACKAGE
• security.snyk.io/vuln/SNYK-JS-NODEOPCUA-2988724 · WEB

node-opcua のその他の脆弱性

• CVE-2022-24375高 7.5The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumpti…
• CVE-2022-21208高 7.5The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks …