Advisories · Weakness
CWE-606.
Every Advisory and CVE whose sources give the weakness CWE-606, newest first.
- CVSS 7.5 High
Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing
- Progress Software Telerik Document Processing Libraries
- Denial of service
- CWE-606
- CVSS 7.5 High
Unchecked Input for Loop Condition in hMailServer
- Progressive Robot Ltd hMailServer
- CWE-606
- CVSS 4.7 Medium
Unchecked Input for Loop Condition in Wireshark
- Wireshark
- CWE-606
- CVSS 7.1 High
Temporal Server Schedule exclusion search can cause excessive CPU consumption
- Temporal Technologies, Inc. Temporal Server
- CWE-606
- CVSS 5.5 Medium
Poppler: poppler: unbounded cpu loop in splashoutputdev::tilingpatternfill via unvalidated tiling-pattern repeat count (denial of service)
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- CWE-606
- CVSS 8.2 High
smol-toml: Denial of Service via malformed TOML documents
- Denial of service
- CWE-606
<1.7.1 · fixed in 1.7.1
GHSA-7w5x-hrqm-74c2 · CVE-2026-85730 - CVSS 8.8 High
Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences becaus…
- Pegasystems Pega Infinity
- CWE-606
- CVSS 5.1 Medium
Denial of Service in GNU wget
- GNU wget
- CWE-606
- CVSS 7.5 High
Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability
- CWE-606
>=8.0.0, <8.0.30 || >=9.0.0, <9.0.19 || >=10.0.0, <10.0.11 · fixed in 8.0.30, 9.0.19, 10.0.11
GHSA-m93f-wj8c-rp8p · CVE-2026-62901 - CVSS 5.3 Medium
Mermaid radar diagrams are vulnerable to DoS
- CWE-606
- CWE-1322
>=11.6.0, <11.16.1 · fixed in 11.16.1
GHSA-rhh3-jpg6-66xh · CVE-2026-71439 - CVSS 8.6 High
Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability
- Cisco IOS XE Software
- Cisco IOS
- CWE-606
- CVSS 6.5 Medium
Apache Qpid Proton Dotnet: Unbounded disposition range handling can lead to denial of service
- Apache Software Foundation Apache Qpid Proton Dotnet
- CWE-606
- CVSS 6.5 Medium
Apache Qpid Broker-J: Unbounded disposition range handling can lead to denial of service
- Apache Software Foundation Apache Qpid Broker-J
- CWE-606
- CVSS 6.5 Medium
Apache Qpid Proton-J: Unbounded disposition range handling can lead to denial of service
- Apache Software Foundation Apache Qpid Proton-J
- CWE-606
- CVSS 6.6 Medium
Loytec LINX firmware: Unchecked input for loop condition in the SNMP agent
- Loytec LIP-ME20xC
- Loytec L-INX
- CWE-606
- CVSS 7.1 High
Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash
- Juniper Networks Junos OS
- CWE-606
- CVSS 5.5 Medium
Unchecked Input for Loop Condition in Wireshark
- Wireshark
- CWE-606
- CVSS 8.2 High
tarfile opened in streaming mode mishandles EOF
- Python Software Foundation CPython
- Denial of service
- CWE-252
- CVSS 8.7 High
kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client event loop by su...
- Denial of service
- CWE-606
<2.3.2 · fixed in 2.3.2
GHSA-2jcm-hq8r-84wx · CVE-2026-10143 - CVSS 2.4 Low
Logic bypass vulnerability in the file system.
- Huawei HarmonyOS
- CWE-606
- CVSS 6.5 Medium
Inefficient candidate hostname parsing in crypto/x509
- CWE-606
<1.25.11 || >=1.26.0-0, <1.26.4 · fixed in 1.25.11, 1.26.4
GO-2026-5037 · CVE-2026-27145 - CVSS 5.3 Medium
Unbounded resend loop in BIND 9 resolver
- ISC BIND 9
- CWE-606
- CVSS 4.9 Medium
Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet
- Palo Alto Networks Prisma SD-WAN ION
- CWE-606
- CVSS 7.5 High
protobuf.js: Denial of service through unbounded protobuf recursion
- Denial of service
- CWE-606
<7.5.6 || >=8.0.0, <8.0.2 · fixed in 7.5.6, 8.0.2
GHSA-685m-2w69-288q · CVE-2026-44289 - CVSS 7.5 High
Quadratic string concatentation in consumeComment in net/mail
- CWE-606
<1.25.10 || >=1.26.0-0, <1.26.3 · fixed in 1.25.10, 1.26.3
GO-2026-4986 · CVE-2026-39820 - CVSS 7.5 High
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
- CWE-606
<0.53.0 · fixed in 0.53.0
GO-2026-4918 · CVE-2026-33814 - CVSS 7.5 High
python-multipart has Denial of Service via unbounded multipart part headers
- Denial of service
- CWE-606
<0.0.27 · fixed in 0.0.27
GHSA-pp6c-gr5w-3c5g · CVE-2026-42561 - CVSS 5.3 Medium
Apache Thrift: c_glib dispatch stack overflow
- Apache Software Foundation Apache Thrift
- Denial of service
- CWE-606
- CVSS 7.5 High
Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input
- Denial of service
- CWE-606
<1.4.0 · fixed in 1.4.0
GHSA-5m6q-g25r-mvwx · CVE-2026-33891 - CVSS 7.5 High
Excessive NSEC3 iterations cause high CPU load during insecure delegation validation
- ISC BIND 9
- Denial of service
- CWE-606
- CVSS 6.9 Medium
Liquid Studio 2.17 Denial of Service via Malformed Input
- Pixarra Liquid Studio
- CWE-606
- CVSS 7.7 High
Denial of service (DOS) in SAP Supply Chain Management
- SAP_SE SAP Supply Chain Management
- CWE-606
- CVSS 7.7 High
Denial of service (DOS) in SAP Supply Chain Management
- SAP_SE SAP Supply Chain Management
- CWE-606
- CVSS 7.5 High
Plesk Obsidian versions 8.0.1 through 18.0.73 are vulnerable to a Denial of Service (DoS) condition.
- Denial of service
- CWE-606
- CVSS 6.9 Medium
Liferay Portal has unchecked input for loop condition vulnerability in XML-RPC
- CWE-606
<101.0.0 · fixed in 101.0.0
GHSA-95h4-8mqc-4mpf · CVE-2025-43801 - CVSS 6.5 Medium
Denial of Service (DoS) vulnerability in SAP Business Planning and Consolidation
- SAP_SE SAP Business Planning and Consolidation
- CWE-606
- CVSS 7.5 High
Authenticated Relative Path Traversal
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-606
- CVSS 5.9 Medium
Authenticated Unchecked Loop Condition
- ABB ASPECT-Enterprise
- ABB NEXUS Series
- CWE-606
- CVSS 5.3 Medium
RT-Labs P-Net: An Unchecked Input for Loop Condition in RT-Labs P-Net version 1.0.1 or earlier allows an…
- RT-Labs P-Net
- CWE-606
- CVSS 7.5 High
.NET Denial of Service Vulnerability
- CWE-409
- CWE-606
<9.0.0 · fixed in 9.0.0
GHSA-6x36-qxmj-rv4p · CVE-2024-43499 - CVSS 7.5 High
Duplicate Advisory: .NET and Visual Studio Denial of Service Vulnerability
- CWE-409
- CWE-606
<9.0.0 · fixed in 9.0.0
GHSA-wmm6-pgp8-29hg - CVSS 5.3 Medium
Unbounded name compression could lead to Denial of Service
- NLnet Labs Unbound
- CWE-606
- CVSS 5.3 Medium
Excessive time spent checking DSA keys and parameters
- OpenSSL
- Denial of service
- CWE-606
- CVSS 7.5 High
Ryu Infinite Loop vulnerability
- CWE-606
<=4.34 · no fixed version yet
GHSA-fgpw-cx3v-wj95 · CVE-2024-34486 - CVSS 5.9 Medium
Excessive time spent checking invalid RSA public keys
- OpenSSL
- CWE-606
- CVSS 6.5 Medium
KaTeX's maxExpand bypassed by Unicode sub/superscripts
- Denial of service
- CWE-606
>=0.15.4, <0.16.10 · fixed in 0.16.10
GHSA-cvr6-37gx-v8wc · CVE-2024-28244 - CVSS 6.5 Medium
KaTeX's maxExpand bypassed by `\edef`
- Denial of service
- CWE-606
>=0.12.0, <0.16.10 · fixed in 0.16.10
GHSA-64fm-8hw2-v72w · CVE-2024-28243 - CVSS 5.3 Medium
Excessive time spent in DH check / generation with large Q parameter value
- OpenSSL
- CWE-606
- CVSS 5.3 Medium
Excessive time spent checking DH q parameter value
- OpenSSL
- CWE-606
- CVSS 5.3 Medium
Excessive time spent checking DH keys and parameters
- OpenSSL
- CWE-606
-
Swift Project SwiftNIO Extras: Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of…
- Swift Project SwiftNIO Extras
- CWE-606