Advisories · Weakness
CWE-406.
Every Advisory and CVE whose sources give the weakness CWE-406, newest first.
- CVSS 6.9 Medium
Missing HelloVerifyRequest cookie validation in the NetX Secure DTLS server
- Eclipse Foundation Eclipse ThreadX NetX Duo
- Authentication bypass
- CWE-406
- CVSS 4.0, no score published
hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)
- Denial of service
- CWE-406
>=0.26.0-beta.1, <0.26.2 · fixed in 0.26.2
GHSA-6w6g-hm98-mhgm - CVSS 4.7 Medium
ICMPv6 error messages sent for multicast-destined packets and non-unique source addresses enable network amplification in Zephyr's IPv6 stack
- zephyr
- CWE-406
- CVSS 6.5 Medium
Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of service
- Apache Software Foundation Apache Qpid Broker-J
- CWE-406
- CVSS 8.6 High
QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding
- Denial of service
- CWE-406
=1.0.0 · no fixed version yet
GHSA-85rg-p3fr-xc2f · CVE-2026-54609 - CVSS 5.3 Medium
'max-global-quota' reset by DNSSEC validation restarts
- NLnet Labs Unbound
- CWE-406
- CVSS 6.9 Medium
Technitium DNS Server excessive DNSSEC requests
- Technitium DNS Server
- Denial of service
- CWE-405
- CVSS 5.3 Medium
PocketMine-MP: Network amplification vulnerability with `ActorEventPacket`
- CWE-406
<5.39.2 · fixed in 5.39.2
GHSA-7hmv-4j2j-pp6f · CVE-2026-86202 -
OpenClaw: Unauthorized Telegram Senders Trigger Media Download and Disk Write Before Access Check
- Denial of service
- CWE-208
<2026.2.24 · fixed in 2026.2.24
GHSA-h656-5vcf-cm23 - CVSS 5.3 Medium
DoS Vulnerability in ntpd-rs
- CWE-406
>=1.2.0, <1.6.2 · fixed in 1.6.2
GHSA-4855-q42w-5vr4 · CVE-2025-58066 - CVSS 8.6 High
Possible External service interaction Vulnerability in OpenText iManager
- OpenText iManager
- Server-side request forgery (SSRF)
- CWE-406
- CVSS 7.5 High
Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes accumulation of low-rate DNS queries such that there is a larg…
- CWE-406
- CVSS 7.5 High
An issue was discovered in Technitium through 11.0.2.
- CWE-406
- CVSS 7.5 High
An issue was discovered in Technitium through 11.0.2.
- CWE-406
- CVSS 7.5 High
IBM MQ denial of service
- IBM MQ
- CWE-406
- CVSS 2.6 Low
drybjed ansible-ntp main.yml amplification
- drybjed ansible-ntp
- CWE-406
- CVSS 8.6 HighCritical · KEVKEV
PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering
- Palo Alto Networks Cloud NGFW
- Palo Alto Networks PAN-OS
- CWE-406
-
OpenVPN Access Server: OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple…
- OpenVPN Access Server
- CWE-406
- CVSS 5.8 Medium
Jenkins vulnerable to UDP amplification reflection attack
- CWE-406
<2.204.2 || >=2.205, <2.219 · fixed in 2.204.2, 2.219
GHSA-gpxv-776p-7gc7 · CVE-2020-2100 - CVSS 6.6 Medium
OCI OpenDDS Secure Network Amplification
- OCI OpenDDS
- CWE-406
- CVSS 7.5 High
eProsima Fast DDS Network Amplification
- eProsima Fast DDS
- CWE-406
- CVSS 7.5 High
TwinOaks Computing CoreDX DDS Secure Network Amplification
- TwinOaks Computing CoreDX DDS
- CWE-406
- CVSS 8.8 High
Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro
- RTI Connext Professional
- RTI Connext Micro
- CWE-406
- CWE-923
-
A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1.
- nbdkit
- CWE-406
-
unbound: An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux…
- unbound
- CWE-406