Description
The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablity.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
CODESYS Development System 3
Default version status: unaffected
3.0.0.0 to < 3.5.22.40affected
CODESYS Gateway
Default version status: unaffected
3.0.0.0 to < 3.5.22.40affected
CODESYS Edge Gateway for Windows
Default version status: unaffected
3.0.0.0 to < 3.5.22.40affected
CODESYS HMI (SL)
Default version status: unaffected
3.0.0.0 to < 3.5.22.40affected
CODESYS OPC DA Server SL
Default version status: unaffected
3.0.0.0 to < 3.5.22.40affected
CODESYS PLCHandler
Default version status: unaffected
3.0.0.0 to < 3.5.22.40affected
CODESYS Runtime Toolkit
Default version status: unaffected
3.0.0.0 to < 3.5.22.40affected
CODESYS Edge Gateway for Linux
Default version status: unaffected
3.15.0.0 to < 4.23.0.0affected