Threats affecting pkg:maven/org.apache.plc4x/plc4x-java

Apache PLC4X Java implementation versions 0.10.0 through before 1.0.0 contain multiple memory allocation and recursion flaws. These include excessive memory allocation based on unverified size values, uncontrolled recursion depth, and lack of limits on resource allocation during protocol parsing. The OPC UA driver is vulnerable before authentication, allowing an attacker impersonating a server to cause denial of service by exhausting memory or stack resources. Users are advised to upgrade to version 1.0.0, which addresses these issues.