Advisories · Weakness
CWE-405.
Every Advisory and CVE whose sources give the weakness CWE-405, newest first.
- CVSS 7.5 High
jwt-go allows excessive memory allocation during header parsing
- CWE-405
>=3.2.0, <=3.2.2 · no fixed version yet
GHSA-mh63-6h87-95cp · CVE-2025-30204 - CVSS 6.5 Medium
Possible DoS by memory exhaustion in net-imap
- Denial of service
- CWE-405
>=0.3.2, <0.3.8 || >=0.4.0, <0.4.19 || >=0.5.0, <0.5.6 · fixed in 0.3.8, 0.4.19, 0.5.6
GHSA-7fc5-f82f-cx69 · CVE-2025-25186 - CVSS 7.5 HighCritical · CVSS 7+ and EPSS
Many records in the additional section cause CPU exhaustion
- ISC BIND 9
- CWE-405
- CVSS 6.9 Medium
UDP traffic amplification via fastd's fast reconnect feature
- neocturne fastd
- CWE-405
- CVSS 7.5 High
Suricata oversized resource names utilizing DNS name compression can lead to resource starvation
- OISF suricata
- CWE-405
- CWE-779
- CVSS 8.6 High
Uncontrolled Recursion and Asymmetric Resource Consumption in Altair media/file proxy
- nexryai altair
- Denial of service
- CWE-405
- CVSS 7.4 High
Uncontrolled Recursion and Asymmetric Resource Consumption (Amplification) in media/file proxy in Misskey
- misskey
- Denial of service
- CWE-405
- CVSS 7.5 High
body-parser vulnerable to denial of service when url encoding is enabled
- CWE-405
<1.20.3 · fixed in 1.20.3
GHSA-qwcr-r2fm-qrc7 · CVE-2024-45590 - CVSS 6.5 Medium
IBM InfoSphere Information Server denial of service
- IBM InfoSphere Information Server
- CWE-405
- CVSS 5.3 Medium
Botan has a Denial of Service Due to Excessive Name Constraints
- randombit botan
- CWE-405
- CVSS 5.9 Medium
IBM MQ Container denial of service
- IBM MQ Operator
- CWE-405
- CVSS 7.5 High
Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters
- randombit botan
- Denial of service
- CWE-405
- CVSS 6.2 Medium
Quoted zip-bomb protection for zipfile
- Python Software Foundation CPython
- CWE-405
- CVSS 2.7 Low
NAVER nGrinder: nGrinder before 3.5.9 allows to set delay without limitation…
- NAVER nGrinder
- CWE-405
- CVSS 7.5 High
An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions.
- Lenovo System Management Module (SMM)
- Lenovo Fan Power Controller (FPC)
- CWE-405
- CVSS 5.9 Medium
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
- Denial of service
- CWE-405
>=10.0.0, <10.4.33 || >=11.0.0, <11.5.20 · fixed in 10.4.33, 11.5.20
GHSA-8c28-5mp7-v24h · CVE-2022-23500 - CVSS 8.6 High
OCI OpenDDS Secure Amplification
- OCI OpenDDS
- CWE-405
- CVSS 6.5 Medium
Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings
- Denial of service
- CWE-405
<1.4.4 · fixed in 1.4.4
GHSA-jj6m-r8jc-2gp7 · CVE-2021-32699 - CVSS 5.9 Medium
Denial of Service in Page Error Handling
- Denial of service
- CWE-405
>=9.0.0, <9.5.25 || >=10.0.0, <10.4.14 || >=11.0.0, <11.1.1 · fixed in 9.5.25, 10.4.14, 11.1.1
GHSA-4p9g-qgx9-397p · CVE-2021-21359 - CVSS 5.3 Medium
Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes.
- Linux kernel
- CWE-405