Advisories · Weakness
CWE-408.
Every Advisory and CVE whose sources give the weakness CWE-408, newest first.
- CVSS 5.5 Medium
Sssd: sssd: denial of service via unprivileged autofs cache invalidation
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- CWE-408
- CVSS 7.5 High
Unnecessary validation of DNSSEC signed records
- ISC BIND 9
- CWE-408
- CVSS 7.8 High
tcp: call sk_data_ready() after listener migration
- Linux kernel
- CWE-408
- CVSS 5.3 Medium
Amplification vulnerabilities via self-pointed glue records
- ISC BIND 9
- CWE-408
- CVSS 6.9 Medium
OpenClaw: Telegram audio preflight transcription enables resource consumption by unauthorized senders
- Denial of service
- CWE-408
<2026.3.31 · fixed in 2026.3.31
GHSA-m6fx-m8hc-572m · CVE-2026-41331 - CVSS 6.9 Medium
OpenClaw runs Discord audio preflight transcription before member authorization
- Denial of service
- CWE-408
<2026.3.31 · fixed in 2026.3.31
GHSA-hhff-fj5f-qg48 · CVE-2026-41374 - CVSS 8.7 High
OpenClaw: MS Teams webhook parses body before JWT validation, enabling unauthenticated resource exhaustion
- Denial of service
- CWE-408
<2026.3.31 · fixed in 2026.3.31
GHSA-p464-m8x6-vhv8 · CVE-2026-41405 - CVSS 7.5 High
Eclipse Californium denial of service (DoS) via Datagram Transport Layer Security (DTLS) handshake on parameter mismatch
- CWE-408
>=2.0.0, <2.7.3 || >=3.0.0, <3.6.0 · fixed in 2.7.3, 3.6.0
GHSA-qq3j-44gw-cf6r · CVE-2022-2576 - CVSS 7.5 High
Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.
- Juniper Networks Junos OS
- CWE-408