high7.5
CVE-2018-12086
High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua
Impact
Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| nuget | OPCFoundation.NetStandard.Opc.Ua | <= 1.4.352.12 | 1.4.353.15 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opcfoundation | Unified Architecture-.Net-Legacy | through 1.03.342 |
| Opcfoundation | Unified Architecture-Java | through 1.03.343 |
| Opcfoundation | Unified Architecture .Net-Standard | through 1.03.352.12 |
| Opcfoundation | Unified Architecture Ansic | through 1.03.340 |
| Debian | Debian Linux | Version 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
- http://www.securityfocus.com/bid/105538
- http://www.securitytracker.com/id/1041909
- https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12086.pdf
- https://www.debian.org/security/2018/dsa-4359
- https://github.com/advisories/GHSA-782p-53wq-cxmj
- https://nvd.nist.gov/vuln/detail/CVE-2018-12086