# Denial of service. Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabled](https://agentprime.io/advisories/CVE-2026-102012.md) `CVE-2026-102012` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled](https://agentprime.io/advisories/CVE-2026-102011.md) `CVE-2026-102011` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled](https://agentprime.io/advisories/CVE-2026-102000.md) `CVE-2026-102000` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled](https://agentprime.io/advisories/CVE-2026-101999.md) `CVE-2026-101999` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Junos OS and Junos OS Evolved: An attacker causes routing protocol daemon crash when OSPFv3 is enabled](https://agentprime.io/advisories/CVE-2026-101971.md) `CVE-2026-101971` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is enabled](https://agentprime.io/advisories/CVE-2026-101936.md) `CVE-2026-101936` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configured](https://agentprime.io/advisories/CVE-2026-101984.md) `CVE-2026-101984` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled](https://agentprime.io/advisories/CVE-2026-101989.md) `CVE-2026-101989` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is used](https://agentprime.io/advisories/CVE-2026-101993.md) `CVE-2026-101993` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured](https://agentprime.io/advisories/CVE-2026-101996.md) `CVE-2026-101996` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Junos OS and Junos OS Evolved: An attacker causes an rpd crash when inter-AS MVPN ingress replication is used](https://agentprime.io/advisories/CVE-2026-102064.md) `CVE-2026-102064` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabled](https://agentprime.io/advisories/CVE-2026-102071.md) `CVE-2026-102071` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Junos OS: SRX4000 Series, SRX5000 Series and MX Series with SPC3: With application services configured, high session churn causes memory leak which will ultimately impact traffic](https://agentprime.io/advisories/CVE-2026-102081.md) `CVE-2026-102081` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [F´: SpacePacketDeframer Small Packet Assertion DoS](https://agentprime.io/advisories/CVE-2026-92151.md) `CVE-2026-92151` · CVE record: nasa fprime · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used](https://agentprime.io/advisories/CVE-2026-102070.md) `CVE-2026-102070` · CVE record: Juniper Networks Junos OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is used](https://agentprime.io/advisories/CVE-2026-102063.md) `CVE-2026-102063` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregation](https://agentprime.io/advisories/CVE-2026-67414.md) `CVE-2026-67414` · CVE record: rabbitmq rabbitmq-server · CVSS 6.0 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup](https://agentprime.io/advisories/CVE-2026-86561.md) `CVE-2026-86561` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [NGINX ngx_http_js_module vulnerability](https://agentprime.io/advisories/CVE-2026-101025.md) `CVE-2026-101025` · CVE record: F5 NGINX JavaScript · CVSS 6.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Gitea Maven checksum upload quota bypass and memory exhaustion](https://agentprime.io/advisories/CVE-2026-73273.md) `CVE-2026-73273` · CVE record: Gitea Gitea · CVSS 4.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Gitea repository initialization resource exhaustion](https://agentprime.io/advisories/CVE-2026-73130.md) `CVE-2026-73130` · CVE record: Gitea Gitea · CVSS 4.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Gitea Swift package manifest memory exhaustion](https://agentprime.io/advisories/CVE-2026-63021.md) `CVE-2026-63021` · CVE record: Gitea Gitea · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Gitea Alpine package parsing memory exhaustion](https://agentprime.io/advisories/CVE-2026-62925.md) `CVE-2026-62925` · CVE record: Gitea Gitea · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Gitea GitLab migration denial of service](https://agentprime.io/advisories/CVE-2026-60021.md) `CVE-2026-60021` · CVE record: Gitea Gitea · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Gitea OneDev migration denial of service](https://agentprime.io/advisories/CVE-2026-60018.md) `CVE-2026-60018` · CVE record: Gitea Gitea · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [libschrift through 0.10.2 Divide by Zero via unitsPerEm in draw_line](https://agentprime.io/advisories/CVE-2026-110605.md) `CVE-2026-110605` · CVE record: tomolt libschrift · CVSS 6.8 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [quirc through 1.2 Denial of Service via find_alignment_pattern Spiral Search](https://agentprime.io/advisories/CVE-2026-110596.md) `CVE-2026-110596` · CVE record: dlbeer quirc · CVSS 6.8 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [BottleCRM 0.45 through 1.14.5 Memory Exhaustion via Contact and Case CSV Import](https://agentprime.io/advisories/CVE-2026-110595.md) `CVE-2026-110595` · CVE record: MicroPyramid BottleCRM · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing Rule Regex](https://agentprime.io/advisories/CVE-2026-110594.md) `CVE-2026-110594` · CVE record: MicroPyramid BottleCRM · CVSS 6.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer](https://agentprime.io/advisories/CVE-2026-110591.md) `CVE-2026-110591` · CVE record: OW2 ASM · CVSS 6.8 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [OW2 ASM 3.0 before 9.11 Exponential Memory Allocation in JSRInlinerAdapter](https://agentprime.io/advisories/CVE-2026-110270.md) `CVE-2026-110270` · CVE record: OW2 ASM · CVSS 6.8 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReader](https://agentprime.io/advisories/CVE-2026-110263.md) `CVE-2026-110263` · CVE record: OW2 ASM · CVSS 6.8 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in AdviceAdapter](https://agentprime.io/advisories/CVE-2026-110262.md) `CVE-2026-110262` · CVE record: OW2 ASM · CVSS 4.8 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES](https://agentprime.io/advisories/CVE-2026-110261.md) `CVE-2026-110261` · CVE record: OW2 ASM · CVSS 6.8 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [OW2 ASM 3.0 before 9.11 Quadratic Memory Allocation via Exception Handlers](https://agentprime.io/advisories/CVE-2026-110260.md) `CVE-2026-110260` · CVE record: OW2 ASM · CVSS 6.8 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [OW2 ASM 3.0 before 9.11 Uncontrolled Recursion via ClassWriter.replaceAsmInstructions()](https://agentprime.io/advisories/CVE-2026-110259.md) `CVE-2026-110259` · CVE record: OW2 ASM · CVSS 6.8 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions](https://agentprime.io/advisories/CVE-2026-110258.md) `CVE-2026-110258` · CVE record: OW2 ASM · CVSS 6.8 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute](https://agentprime.io/advisories/CVE-2026-110257.md) `CVE-2026-110257` · CVE record: OW2 ASM · CVSS 6.8 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [L-SMASH through 2.14.5 Infinite Loop in VC-1 Importer Probe](https://agentprime.io/advisories/CVE-2016-20099.md) `CVE-2016-20099` · CVE record: l-smash l-smash · CVSS 6.8 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Stack overflow dropping a long chain of recursive types](https://agentprime.io/advisories/GHSA-wjc8-633q-pwxr.md) `GHSA-wjc8-633q-pwxr`, `CVE-2026-119137`, `RUSTSEC-2026-0359` · crates.io `wasmtime`: affected `>=42.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `48.0.6`, `49.0.3` · CVSS 6.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Component-model handle tables are capped only per instance and charged to no limit](https://agentprime.io/advisories/GHSA-q554-3cjc-rx7p.md) `GHSA-q554-3cjc-rx7p`, `CVE-2026-119134`, `RUSTSEC-2026-0363` · crates.io `wasmtime`: affected `>=0.0.0-0, <36.0.18 || >=37.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `36.0.18`, `48.0.6`, `49.0.3` · CVSS 6.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Panic when invoking an async-lifted function via \`call\`](https://agentprime.io/advisories/GHSA-m6w2-jwq2-cv2c.md) `GHSA-m6w2-jwq2-cv2c`, `CVE-2026-119139`, `RUSTSEC-2026-0353` · crates.io `wasmtime`: affected `>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `48.0.6`, `49.0.3` · CVSS 5.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Panic when pending calls are run after a trap](https://agentprime.io/advisories/GHSA-hmwq-g22x-qjw5.md) `GHSA-hmwq-g22x-qjw5`, `CVE-2026-119138`, `RUSTSEC-2026-0361` · crates.io `wasmtime`: affected `>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `48.0.6`, `49.0.3` · CVSS 5.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Brotli certificate decompression can allocate up to 1 GiB before authentication](https://agentprime.io/advisories/GHSA-h2v8-394m-p7vv.md) `GHSA-h2v8-394m-p7vv`, `CVE-2026-123610`, `RUSTSEC-2026-0348` · crates.io `rustls`: affected `>=0.23.9, <0.23.46`, fixed in `0.23.46` · CVSS 6.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Panic viewing component model stream or future as the wrong type](https://agentprime.io/advisories/GHSA-63h4-6cx9-pjfj.md) `GHSA-63h4-6cx9-pjfj`, `CVE-2026-119135`, `RUSTSEC-2026-0355` · crates.io `wasmtime`: affected `>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `48.0.6`, `49.0.3` · CVSS 5.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Overlapping string transcode in a fused adapter can panic](https://agentprime.io/advisories/GHSA-54p9-vhhq-8f7q.md) `GHSA-54p9-vhhq-8f7q`, `CVE-2026-119132`, `RUSTSEC-2026-0360` · crates.io `wasmtime`: affected `>=49.0.0, <49.0.3`, fixed in `49.0.3` · CVSS 5.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Host panic when component \`call_async\` is cancelled under some conditions](https://agentprime.io/advisories/GHSA-3r89-v5mq-j5xf.md) `GHSA-3r89-v5mq-j5xf`, `CVE-2026-119142`, `RUSTSEC-2026-0354` · crates.io `wasmtime`: affected `>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `48.0.6`, `49.0.3` · CVSS 5.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [CVE-2026-109449: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process](https://agentprime.io/advisories/PKSA-zxg3-vspd-sr38.md) `PKSA-zxg3-vspd-sr38`, `CVE-2026-109449`, `PKSA-vq1j-sc3k-jzzk` · Packagist `symfony/symfony`: affected `>=2.4.0, <3.0.0 || >=3.0.0, <4.0.0 || >=4.0.0, <5.0.0 || >=5.0.0, <5.1.0 || >=5.1.0, <5.2.0 || >=5.2.0, <5.3.0 || >=5.3.0, <5.4.0 || >=5.4.0, <5.4.54 || >=6.0.0, <6.1.0 || >=6.1.0, <6.2.0 || >=6.2.0, <6.3.0 || >=6.3.0, <6.4.0 || >=6.4.0, <6.4.48 || >=7.0.0, <7.1.0 || >=7.1.0, <7.2.0 || >=7.2.0, <7.3.0 || >=7.3.0, <7.4.0 || >=7.4.0, <7.4.21 || >=8.0.0, <8.1.0 || >=8.1.0, <8.1.9`, fixed in `3.0.0`, `4.0.0`, `5.0.0`, `5.1.0`, `5.2.0`, `5.3.0`, `5.4.0`, `5.4.54`, `6.1.0`, `6.2.0`, `6.3.0`, `6.4.0`, `6.4.48`, `7.1.0`, `7.2.0`, `7.3.0`, `7.4.0`, `7.4.21`, `8.1.0`, `8.1.9` · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [containerd: daemon crash when pulling an image with a crafted Content-Length header](https://agentprime.io/advisories/GHSA-8647-2jxj-p2rc.md) `GHSA-8647-2jxj-p2rc` · Go `github.com/containerd/containerd/v2`: affected `>=2.2.0, <2.2.10 || >=2.3.0, <2.3.7 || >=2.4.0, <2.4.2`, fixed in `2.2.10`, `2.3.7`, `2.4.2` · No CVSS score · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service, CWE-20 - [containerd: host disk exhaustion when pulling an image with an unbounded layer stream](https://agentprime.io/advisories/GHSA-hc94-p972-ch66.md) `GHSA-hc94-p972-ch66` · Go `github.com/containerd/containerd/v2`: affected `>=2.0.0, <2.0.14 || >=2.2.0, <2.2.10 || >=2.3.0, <2.3.7 || >=2.4.0, <2.4.2`, fixed in `2.0.14`, `2.2.10`, `2.3.7`, `2.4.2` · No CVSS score · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service - [containerd CRI plugin: mount and snapshot leak when container checkpoint restore fails](https://agentprime.io/advisories/GHSA-5p7c-hggf-c748.md) `GHSA-5p7c-hggf-c748` · Go `github.com/containerd/containerd/v2`: affected `>=2.2.0, <2.2.10 || >=2.3.0, <2.3.7`, fixed in `2.2.10`, `2.3.7` · No CVSS score · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service - [Deadlock in OpenVPN ovpn-dco-win](https://agentprime.io/advisories/CVE-2026-105390.md) `CVE-2026-105390` · CVE record: OpenVPN ovpn-dco-win · CVSS 6.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service, CWE-413 - [Denial of Service via sending bogus X.509 certificates](https://agentprime.io/advisories/CVE-2026-77205.md) `CVE-2026-77205` · CVE record: The Libreswan Project libreswan · CVSS 3.7 Low · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service - [CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)](https://agentprime.io/advisories/CVE-2026-100139.md) `CVE-2026-100139` · CVE record: Adobe Content Credentials Rust SDK and 2 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service - [CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)](https://agentprime.io/advisories/CVE-2026-105902.md) `CVE-2026-105902` · CVE record: Adobe Content Credentials Rust SDK and 2 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service - [CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)](https://agentprime.io/advisories/CVE-2026-100137.md) `CVE-2026-100137` · CVE record: Adobe Content Credentials Rust SDK and 2 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service - [CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)](https://agentprime.io/advisories/CVE-2026-106627.md) `CVE-2026-106627` · CVE record: Adobe Content Credentials Rust SDK and 2 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service - [CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)](https://agentprime.io/advisories/CVE-2026-100138.md) `CVE-2026-100138` · CVE record: Adobe Content Credentials Rust SDK and 2 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service - [Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-mf4x-w4gh-4656.md) `GHSA-mf4x-w4gh-4656`, `CVE-2026-70186` · NuGet `Microsoft.AspNetCore.App.Runtime.linux-arm` and 10 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13`, fixed in `8.0.32`, `9.0.21`, `10.0.13` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service - [Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-c399-9853-6jmj.md) `GHSA-c399-9853-6jmj`, `BIT-dotnet-2026-96959`, `BIT-dotnet-sdk-2026-96959`, `CVE-2026-96959` · NuGet `System.Security.Cryptography.Xml`: affected `>=8.0.0, <8.0.5 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.5`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .