Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2023-26151

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-gfvq-mxw3-mfq3

asyncua vulnerable to denial of service via infinite loop Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory.

gitlab/pypi/asyncua/CVE-2023-26151

Loop with Unreachable Exit Condition ('Infinite Loop') Versions of the package asyncua before 0.9.96 is vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory.

pypa/asyncua/PYSEC-2023-190

Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory.

pysec/PYSEC-2023-190

Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory.