https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 14:25:35 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-166731 EUVD-2026-166731 https://cve.radiocsirt.org/vuln/euvd-2026-166731 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25897 <p>The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.</p> <p>The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-25897 https://cve.radiocsirt.org/vuln/ghsa-fph9-f5r6-vhqf <p><strong>Affected:</strong> Maven: org.eclipse.milo:sdk-server</p> <p>### Impact</p> <p>Denial of Service</p> <p>### Details</p> <p>OPC UA specification describes a concept named _Subscriptions_. _Subscriptions_ monitor a set of _Monitored Items_ for _Notifications_ and return them to the _Client_ in response to _Publish_ requests. The server notifies the client about changes only in case the value is changed. Each monitored item is configured on a subscription, each subscription is linked to a single OPC UA session. Most OPC UA implementations set many controls and limitations for excessive memory consumption. For example:</p> <p>* What is the maximum allowed number of concurrent sessions * For each active sessions - what is the maximum allowed number of concurrent subscription per a single session * For each active subscription - what is the maximum allowed number of concurrent monitored items per a single subscription</p> <p>Clarity Research discovered a unique way to bypass those restrictions and fill up the OPC UA server process memory.</p> <p>The close session request closes a connected session. A `deleteSubscription` flag is also sent in that message and determines whether the server should save the subscriptions for a future session reconnection or discard them upon session termination. If the `deleteSubscription` flag is `False` the server will store the subscriptions thus filling up the memory in an unlimited manner.</p> <p>Sending multiple subscribe requests with multiple monitored items from multiple sessions will quickly fill up the process memory until the server crashes…</p> <p><strong>Affected:</strong> Maven: org.eclipse.milo:sdk-server</p> <p>### Impact</p> <p>Denial of Service</p> <p>### Details</p> <p>OPC UA specification describes a concept named _Subscriptions_. _Subscriptions_ monitor a set of _Monitored Items_ for _Notifications_ and return them to the _Client_ in response to _Publish_ requests. The server notifies the client about changes only in case the value is changed. Each monitored item is configured on a subscription, each subscription is linked to a single OPC UA session. Most OPC UA implementations set many controls and limitations for excessive memory consumption. For example:</p> <p>* What is the maximum allowed number of concurrent sessions * For each active sessions - what is the maximum allowed number of concurrent subscription per a single session * For each active subscription - what is the maximum allowed number of concurrent monitored items per a single subscription</p> <p>Clarity Research discovered a unique way to bypass those restrictions and fill up the OPC UA server process memory.</p> <p>The close session request closes a connected session. A `deleteSubscription` flag is also sent in that message and determines whether the server should save the subscriptions for a future session reconnection or discard them upon session termination. If the `deleteSubscription` flag is `False` the server will store the subscriptions thus filling up the memory in an unlimited manner.</p> <p>Sending multiple subscribe requests with multiple monitored items from multiple sessions will quickly fill up the process memory until the server crashes…</p> https://cve.radiocsirt.org/vuln/ghsa-fph9-f5r6-vhqf https://cve.radiocsirt.org/vuln/gsd-2022-25897 gsd-2022-25897 https://cve.radiocsirt.org/vuln/gsd-2022-25897 https://cve.radiocsirt.org/vuln/rhsa-2022:8902 <p>sdk-server: Denial of Service reactor-netty-http: Log request headers in some cases of invalid HTTP requests apache-commons-text: variable interpolation RCE</p> <p>sdk-server: Denial of Service reactor-netty-http: Log request headers in some cases of invalid HTTP requests apache-commons-text: variable interpolation RCE</p> https://cve.radiocsirt.org/vuln/rhsa-2022:8902