An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation lo…

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

References

• https://github.com/open62541/open62541/issues/8133
• https://github.com/open62541/open62541/blob/v1.5.5/src/server/ua_services_nodemanagement.c
• https://github.com/open62541/open62541/blob/v1.5.5/examples/ci_server.c
• https://github.com/open62541/open62541/blob/v1.5.5/plugins/ua_accesscontrol_default.c