CVE-2026-11946
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
02/07/2026
Última modificación:
02/07/2026
Descripción
*** Pendiente de traducción *** An unauthenticated remote attacker can exhaust<br />
server memory via the GetEndpoints Discovery Service in open62541. The<br />
endpointUrl field of GetEndpointsRequest is not validated for length. An<br />
attacker can declare an arbitrarily large string (up to ~4.09 GB via the UInt32<br />
length field) delivered across intermediate chunks without ever sending the<br />
final chunk. The server buffers all chunks in RAM indefinitely until the<br />
SecureChannel times out. The attack is<br />
pre-session and bypasses all encryption configurations.<br />
<br />
<br />
<br />
The issue affects open62541: from 1.4.0 through 1.4.16, from 1.5.0 through 1.5.4, master.
Impacto
Puntuación base 3.x
7.50
Gravedad 3.x
ALTA