# Denial of service.

Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go)](https://agentprime.io/advisories/CVE-2026-83663.md)
  `CVE-2026-83663` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D)](https://agentprime.io/advisories/CVE-2026-83745.md)
  `CVE-2026-83745` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-130
- [Apache Thrift: c_glib \`read_all\` spins when the underlying read returns 0](https://agentprime.io/advisories/CVE-2026-85476.md)
  `CVE-2026-85476` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: php \`--gen php:inlined\` struct readers (and \`TProtocol::skipBinary\`) have no recursion-depth guard](https://agentprime.io/advisories/CVE-2026-96289.md)
  `CVE-2026-96289` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: Perl \`FramedTransport\` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic)](https://agentprime.io/advisories/CVE-2026-96287.md)
  `CVE-2026-96287` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: Lua \`TFramedTransport\`/\`THttpTransport\` re-slice the buffer on every read (quadratic)](https://agentprime.io/advisories/CVE-2026-94658.md)
  `CVE-2026-94658` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: javame \`TJsonProtocol\`/\`TJSONProtocol\` has no string size bound](https://agentprime.io/advisories/CVE-2026-94657.md)
  `CVE-2026-94657` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: rb \`TJsonProtocol\`/\`TJSONProtocol\` has no string size bound](https://agentprime.io/advisories/CVE-2026-94656.md)
  `CVE-2026-94656` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [WASI preview 0 implementation of \`poll_oneoff\` circumvents fuel consumption](https://agentprime.io/advisories/GHSA-j366-h8gg-77pm.md)
  `GHSA-j366-h8gg-77pm`, `CVE-2026-115380`, `RUSTSEC-2026-0321` · crates.io `wasmtime-wasi`: affected `>=0.0.0-0, <36.0.17 || >=37.0.0, <48.0.4 || >=49.0.0, <49.0.2`, fixed in `36.0.17`, `48.0.4`, `49.0.2` · CVSS 5.1 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Excessive allocated memory on the host when guests don't have stdio](https://agentprime.io/advisories/GHSA-gqmc-89g8-p25r.md)
  `GHSA-gqmc-89g8-p25r`, `CVE-2026-115381`, `RUSTSEC-2026-0322` · crates.io `wasmtime-wasi`: affected `>=0.0.0-0, <36.0.17 || >=37.0.0, <48.0.4 || >=49.0.0, <49.0.2`, fixed in `36.0.17`, `48.0.4`, `49.0.2` · CVSS 5.9 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: Lua \`TJsonProtocol\` string/number readers have no size bound and are quadratic](https://agentprime.io/advisories/CVE-2026-94655.md)
  `CVE-2026-94655` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: Python \`TNonblockingServer\` busy-loops and stops selecting all fds after an 8192-byte-boundary frame](https://agentprime.io/advisories/CVE-2026-94654.md)
  `CVE-2026-94654` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic)](https://agentprime.io/advisories/CVE-2026-94653.md)
  `CVE-2026-94653` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: C++ \`TEvhttpServer\` leaks its \`RequestContext\` when the processor throws before calling back](https://agentprime.io/advisories/CVE-2026-94652.md)
  `CVE-2026-94652` · CVE record: Apache Software Foundation Apache Thrift · CVSS 6.3 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: dart \`TJsonProtocol\`/\`TJSONProtocol\` has no string size bound](https://agentprime.io/advisories/CVE-2026-94648.md)
  `CVE-2026-94648` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: PHP \`thrift_protocol\` C extension ignores the configured \`maxStringSize\`](https://agentprime.io/advisories/CVE-2026-94638.md)
  `CVE-2026-94638` · CVE record: Apache Software Foundation Apache Thrift · CVSS 6.3 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthenticated remote attacker to deny service](https://agentprime.io/advisories/CVE-2026-90440.md)
  `CVE-2026-90440` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-248, CWE-755
- [Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service](https://agentprime.io/advisories/CVE-2026-86537.md)
  `CVE-2026-86537` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Memory corruption, Denial of service, CWE-248
- [YesWiki before 4.6.7 ReDoS via wakka.php Edit-Preview Endpoint](https://agentprime.io/advisories/CVE-2026-104454.md)
  `CVE-2026-104454` · CVE record: YesWiki yeswiki · CVSS 6.9 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely](https://agentprime.io/advisories/CVE-2026-86535.md)
  `CVE-2026-86535` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, Prototype pollution
- [Zebra before 6.0.0-rc.0 Per-Peer Mempool Admission Bypass via P2P tx Messages](https://agentprime.io/advisories/CVE-2026-104429.md)
  `CVE-2026-104429` · CVE record: ZcashFoundation zebra · CVSS 6.9 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Zebra before 11.0.0 Denial of Service via getblock Verbosity 2](https://agentprime.io/advisories/CVE-2026-104428.md)
  `CVE-2026-104428` · CVE record: ZcashFoundation zebra · CVSS 6.9 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Zebra before 6.1.0 Quadratic Complexity DoS via Block Transparent Value Check](https://agentprime.io/advisories/CVE-2026-104426.md)
  `CVE-2026-104426` · CVE record: ZcashFoundation zebra · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes…](https://agentprime.io/advisories/CVE-2026-82458.md)
  `CVE-2026-82458` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory)](https://agentprime.io/advisories/CVE-2026-96288.md)
  `CVE-2026-96288` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: Lua \`THttpTransport:\_parseHeaders\` matches each header line with a backtracking pattern (quadratic)](https://agentprime.io/advisories/CVE-2026-96292.md)
  `CVE-2026-96292` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation](https://agentprime.io/advisories/CVE-2026-61373.md)
  `CVE-2026-61373` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound](https://agentprime.io/advisories/CVE-2026-96990.md)
  `CVE-2026-96990` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: PHP \`TJSONProtocol\` string/number readers have no size bound](https://agentprime.io/advisories/CVE-2026-94644.md)
  `CVE-2026-94644` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: Node.js \`TJSONProtocol\` uses a peer-declared container size as an unbounded loop bound](https://agentprime.io/advisories/CVE-2026-94645.md)
  `CVE-2026-94645` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-1284
- [Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion)](https://agentprime.io/advisories/CVE-2026-94650.md)
  `CVE-2026-94650` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: Java \`TSaslNonblockingServer\` \`Computation.run\` orphans a connection on a pre-auth parse error](https://agentprime.io/advisories/CVE-2026-94651.md)
  `CVE-2026-94651` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-755
- [Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME)](https://agentprime.io/advisories/CVE-2026-85493.md)
  `CVE-2026-85493` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-248
- [Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a pe…](https://agentprime.io/advisories/CVE-2026-85494.md)
  `CVE-2026-85494` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-130, CWE-248, CWE-1188
- [Apache Thrift: PHP \`thrift_protocol\` accelerator: zero-byte container elements](https://agentprime.io/advisories/CVE-2026-91137.md)
  `CVE-2026-91137` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-1284
- [Apache Thrift: C++ \`THeaderTransport::writeVarint32()\` stack buffer overflow on a negative protocol id](https://agentprime.io/advisories/CVE-2026-93925.md)
  `CVE-2026-93925` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Memory corruption, Denial of service, CWE-1335
- [Apache Thrift: C++ \`THeaderTransport::untransform()\` leaks the zlib stream on the error path](https://agentprime.io/advisories/CVE-2026-93926.md)
  `CVE-2026-93926` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: Dart \`TBinaryProtocol.readMessageBegin\` allocates from the pre-versioned name length](https://agentprime.io/advisories/CVE-2026-94633.md)
  `CVE-2026-94633` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-130
- [Apache Thrift: Python \`TJSONProtocol\` has a string length limit that is off by default](https://agentprime.io/advisories/CVE-2026-94634.md)
  `CVE-2026-94634` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-1188
- [Apache Directory LDAP API: Denial of service via crafted telephone number values](https://agentprime.io/advisories/CVE-2026-103885.md)
  `CVE-2026-103885` · CVE record: Apache Software Foundation Apache Directory LDAP API · CVSS 7.5 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: Java \`TSaslNonblockingServer\`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)](https://agentprime.io/advisories/CVE-2026-94639.md)
  `CVE-2026-94639` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.2 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-248, CWE-755
- [Apache Directory LDAP API: Denial of service via excessive memory allocation in BER decode](https://agentprime.io/advisories/CVE-2026-102731.md)
  `CVE-2026-102731` · CVE record: Apache Software Foundation Apache Directory LDAP API · CVSS 7.5 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Apache Thrift: Lua \`TBinaryProtocol:readMessageBegin\` bypasses \`checkStringSize\` on the pre-versioned name](https://agentprime.io/advisories/CVE-2026-94635.md)
  `CVE-2026-94635` · CVE record: Apache Software Foundation Apache Thrift · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service, CWE-130
- [Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader](https://agentprime.io/advisories/CVE-2026-95512.md)
  `CVE-2026-95512` · CVE record: Red Hat Red Hat Hardened Images and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points](https://agentprime.io/advisories/CVE-2026-17508.md)
  `CVE-2026-17508` · CVE record: Legion of the Bouncy Castle Inc. BC-JAVA and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Quadratic-time escaping when converting X.509 distinguished names to strings](https://agentprime.io/advisories/CVE-2026-103604.md)
  `CVE-2026-103604` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Unbounded HSS public key level count allows huge array allocation during signature verification](https://agentprime.io/advisories/CVE-2026-103603.md)
  `CVE-2026-103603` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Unbounded ASN.1 nesting depth causes process-terminating stack overflow](https://agentprime.io/advisories/CVE-2026-103600.md)
  `CVE-2026-103600` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Unbounded PBE iteration count when decrypting PKCS#8 private keys](https://agentprime.io/advisories/CVE-2026-63578.md)
  `CVE-2026-63578` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 7.1 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count](https://agentprime.io/advisories/CVE-2026-63575.md)
  `CVE-2026-63575` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 7.1 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Unbounded allocation from OpenPGP signature and user attribute subpacket lengths](https://agentprime.io/advisories/CVE-2026-63574.md)
  `CVE-2026-63574` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 files](https://agentprime.io/advisories/CVE-2026-63572.md)
  `CVE-2026-63572` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 7.1 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links](https://agentprime.io/advisories/CVE-2026-63570.md)
  `CVE-2026-63570` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 7.1 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion](https://agentprime.io/advisories/CVE-2026-63568.md)
  `CVE-2026-63568` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [DTLS handshake reassembler allocates buffer from unchecked 24-bit length](https://agentprime.io/advisories/CVE-2026-63566.md)
  `CVE-2026-63566` · CVE record: Legion of the Bouncy Castle Inc. bc-csharp · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [OMGF < 6.3.11 - Unauthenticated DoS via do_optimize](https://agentprime.io/advisories/CVE-2026-91828.md)
  `CVE-2026-91828` · CVE record: Unknown OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. · CVSS 7.5 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in Mistral model capability matching on Ruby 3.1.x](https://agentprime.io/advisories/CVE-2026-67989.md)
  `CVE-2026-67989` · CVE record · CVSS 7.5 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue](https://agentprime.io/advisories/CVE-2026-103761.md)
  `CVE-2026-103761` · CVE record: kvcache-ai Mooncake · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service
- [Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write](https://agentprime.io/advisories/CVE-2026-103760.md)
  `CVE-2026-103760` · CVE record: kvcache-ai Mooncake · CVSS 8.2 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service
- [389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue](https://agentprime.io/advisories/CVE-2026-86344.md)
  `CVE-2026-86344` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service

Newest: <https://agentprime.io/advisories/tag/dos.md>
Older: <https://agentprime.io/advisories/tag/dos.md?cursor=WyIyMDI2LTEwLTAxVDIxOjI5OjU1Ljg3NzAwMFoiLCJDVkUtMjAyNi04NjM0NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=dos&cursor=WyIyMDI2LTEwLTAyVDEyOjIyOjIzLjYxNzAwMFoiLCJDVkUtMjAyNi04MzYzMiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/dos/?cursor=WyIyMDI2LTEwLTAyVDEyOjIyOjIzLjYxNzAwMFoiLCJDVkUtMjAyNi04MzYzMiJd>. Everything for agents: <https://agentprime.io/llms.txt>.