CVE catalog
CVE-2026-67858
DEBIAN-CVE-2026-67858
- Severity
- High · CVSS 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.86% · Oct 25, 2026
Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast discovery enabled through the MDNSD backend. An unauthenticated remote attacker can send a RegisterServer or RegisterServer2 request containing many unique discoveryUrls. This allows remote attackers to cause a denial of service.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | open62541 | 13 | 1.4.11.1-1 | vulnerable |
| Debian | open62541 | 13 | 1.4.18-1 | vulnerable |
| Debian | open62541 | 14 | 1.4.11.1-1 | vulnerable |
| Debian | open62541 | 14 | 1.4.18-1 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
[Debian 13 (Trixie)]
- [libopen62541-1.4]Affected
Source package: [open62541]
Details (2)
1.4.11.1-1· amd64 · trixieAffected
pypi · open62541 · debian · 13
1.4.11.1-1· arm64 · trixieAffected
pypi · open62541 · debian · 13
- [libopen62541-1.4-dev]Affected
Source package: [open62541]
Details (2)
1.4.11.1-1· amd64 · trixieAffected
pypi · open62541 · debian · 13
1.4.11.1-1· arm64 · trixieAffected
pypi · open62541 · debian · 13
- [libopen62541-1.4-tools]Affected
Source package: [open62541]
Details (2)
1.4.11.1-1· all · trixieAffected
pypi · open62541 · debian · 13
1.4.11.1-1· all · trixieAffected
pypi · open62541 · debian · 13
Observed: