Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast discovery enabled through the MDNSD backen…

A buffer overflow vulnerability exists in open62541 version 1.5.5 affecting the Local Discovery Server (LDS) when built with multicast discovery enabled via the MDNSD backend. An unauthenticated remote attacker can exploit this by sending a RegisterServer or RegisterServer2 request containing a large number of unique discoveryUrls. The vulnerability results in a denial of service condition. No authentication is required to trigger the vulnerability, making it accessible to any remote attacker. The affected component is the OPC UA server library's discovery and multicast DNS subsystem. Relevant source files include ua_discovery_mdns.c and ua_services_discovery.c. The issue is tracked on GitHub under issue #8094.