CVE-2022-25888

The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk.

• CWE-770

• https://github.com/locka99/opcua/pull/216Patch, Third Party Advisory
• https://github.com/locka99/opcua/pull/216/commits/6fb683c5fec46c6dd347824491c4d93a229da695Patch, Third Party Advisory
• https://security.snyk.io/vuln/SNYK-RUST-OPCUA-2988751Patch, Third Party Advisory
• https://github.com/locka99/opcua/pull/216Patch, Third Party Advisory
• https://github.com/locka99/opcua/pull/216/commits/6fb683c5fec46c6dd347824491c4d93a229da695Patch, Third Party Advisory
• https://security.snyk.io/vuln/SNYK-RUST-OPCUA-2988751Patch, Third Party Advisory

Published

Aug 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-25880Delta Electronics DIAEnergie (All versions prior to 1.8.02.0…9.8
• CVE-2022-25881This affects versions of the package http-cache-semantics be…7.5
• CVE-2022-25882Versions of the package onnx before 1.13.0 are vulnerable to…7.5
• CVE-2022-25883Versions of the package semver before 7.5.2 are vulnerable t…7.5
• CVE-2022-25885The package muhammara before 2.6.0; all versions of package …7.5
• CVE-2022-25887The package sanitize-html before 2.7.1 are vulnerable to Reg…7.5
• CVE-2022-25889Rejected reason: This candidate was in a CNA pool that was n…
• CVE-2022-2589Cross-site Scripting (XSS) - Reflected in GitHub repository …6.1
• CVE-2022-25890All versions of the package wifey are vulnerable to Command …9.8
• CVE-2022-25891The package github.com/containrrr/shoutrrr/pkg/util before 0…7.5
• CVE-2022-25892The package muhammara before 2.6.1, from 3.0.0 and before 3.…7.5
• CVE-2022-25893The package vm2 before 3.9.10 are vulnerable to Arbitrary Co…9.8