Denial-of-Service Vulnerability in OPC UA Tunneller by Insys

CVE-2020-27274

What is CVE-2020-27274?

This vulnerability occurs in the OPC UA Tunneller due to inadequate checks on the return value of the malloc function within its parsing routines. As a consequence, if the allocation fails, the thread processing the message is not correctly managed, potentially leading to a denial-of-service condition. Affected versions prior to 6.3.0.8233 are particularly at risk, which can severely disrupt operational continuity.

References