Open62541

open62541

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Open62541

open62541

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-25761 2Fedoraproject Open62541 2Fedora Open62541 Jun 17, 2026 Aug 23, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 The package open62541/open62541 before 1.2.5, from 1.3-rc1 and before 1.3.1 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all...Show more The package open62541/open62541 before 1.2.5, from 1.3-rc1 and before 1.3.1 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk.Show less
CVE-2020-36429 1Open62541 1Open62541 Jun 17, 2026 Jul 20, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Variant_encodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2022-25761

2Fedoraproject

Open62541

2Fedora

Open62541

Jun 17, 2026

Aug 23, 2022

N/A· v4

7.5 HIGH· v3

N/A· v2

The package open62541/open62541 before 1.2.5, from 1.3-rc1 and before 1.3.1 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk.Show less

CVE-2020-36429

1Open62541

Jun 17, 2026

Jul 20, 2021

N/A· v4

5.5 MEDIUM· v3

2.1 LOW· v2

Variant_encodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth.