PT-2022-17593 · Eclipse · Org.Eclipse.Milo:Sdk-Server
Sharon Brizinov
+2
·
Published
2022-09-08
·
Updated
2022-09-15
·
CVE-2022-25897
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
org.eclipse.milo:sdk-server versions prior to 0.6.8
Description
The issue allows for a Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the
deleteSubscription parameter equal to False. This can be achieved by creating many sessions with subscriptions and monitored items without ever deleting the monitored items, eventually consuming all available process memory and leading to a crash. The OPC UA specification describes a concept named Subscriptions, which monitor a set of Monitored Items for Notifications and return them to the Client in response to Publish requests.Recommendations
For versions prior to 0.6.8, update to version 0.6.8 or later to resolve the issue. As a temporary workaround, consider restricting the number of concurrent sessions, subscriptions per session, and monitored items per subscription to minimize the risk of exploitation. Additionally, avoid using the
deleteSubscription parameter equal to False in CloseSession requests until the issue is resolved.Fix
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Org.Eclipse.Milo:Sdk-Server