Advisories · Weakness
Denial of service.
Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 5.4 Medium
Heap buffer overflow in dBASE index import
- The Document Foundation LibreOffice
- Denial of service
- Memory corruption
- CVSS 7.5 High
FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length
- signalwire freeswitch
- Memory corruption
- Denial of service
- CVSS 7.1 High
ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder
- ImageMagick
- Denial of service
- CVSS 6.5 Medium
filecoin-pin: Unbounded DAG pinning can exhaust server resources
- Denial of service
<1.1.1 · fixed in 1.1.1
GHSA-m5ph-mmg5-6w5h · CVE-2026-62300 - CVSS 7.1 High
Malformed Wi-Fi Beacon Causes Crash on WF200
- Silicon Labs WF200 FW
- Denial of service
- CVSS 7.5 High
Keycloak-services: keycloak-services: unauthenticated denial of service via saml soap endpoint unbounded xml parsing
- Red Hat Build of Keycloak
- Red Hat Single Sign-On 7
- Denial of service
- CVSS 7.7 High
OpenHuman: Unauthenticated dictation WebSocket allows arbitrary audio streaming and unbounded memory growth
- tinyhumansai openhuman
- Authentication bypass
- Denial of service
- CVSS 7.5 High
Keycloak-services: keycloak-services: unauthenticated persistent disk exhaustion via theme gzip cache
- Red Hat Build of Keycloak
- Red Hat Single Sign-On 7
- Denial of service
- CVSS 7.5 High
Keycloak-services: keycloak-services: unauthenticated jvm termination via saml 1.1 authoritybinding parsing loop
- Red Hat Build of Keycloak
- Red Hat Single Sign-On 7
- Denial of service
- CVSS 7.5 High
Keycloak-services: keycloak-services: unauthenticated cpu exhaustion via saml 1.1 keyinfo infinite loop
- Red Hat Build of Keycloak
- Red Hat Single Sign-On 7
- Denial of service
- CVSS 7.5 High
Keycloak-services: keycloak-services: unauthenticated cpu denial of service via saml xml datetime and duration parsing
- Red Hat Build of Keycloak
- Red Hat Single Sign-On 7
- Denial of service
- CVSS 7.1 High
anacrolix/torrent through 1.61.0 Memory Exhaustion via Unbounded HTTP Tracker Response
- anacrolix torrent
- Denial of service
- CVSS 6.8 Medium
Blosc c-blosc2 before 3.5.0 Divide-by-Zero via blosc2_schunk_get_slice_buffer()
- c-blosc2
- Denial of service
- CVSS 6.5 Medium
espressif/mdns has Uncontrolled Recursion in mDNS Name Decompression
- espressif esp-protocols
- Denial of service
-
Apache OFBiz: Denial of Service via unauthenticated userTenantId in multitenant mode
- Apache Software Foundation Apache OFBiz
- Denial of service
- CVSS 7.5 High
Apache OFBiz: Unbounded multi-form row count from a parameter name
- Apache Software Foundation Apache OFBiz
- Denial of service
- Broken access control
- CVSS 8.7 High
Apache Juneau: Denial of service via unbounded memory allocation in parsers and REST request handling
- Apache Software Foundation Apache Juneau
- Denial of service
- CVSS 6.5 Medium
vault-java-driver: stored deeply nested JSON kills every thread that reads it
- jopenlibs vault-java-driver
- Denial of service
-
Uncontrolled resource consumption in Samsung Semiconductor Exynos 850 and others
- Samsung Semiconductor Exynos 850
- Samsung Semiconductor Exynos 2100
- Denial of service
-
Infinite loop in Samsung Semiconductor Exynos 850 and others
- Samsung Semiconductor Exynos 850
- Samsung Semiconductor Exynos 2100
- Denial of service
- CVSS 8.2 High
Kyverno before 1.19.2 Denial of Service via Unbounded CEL Policy Evaluation Cost
- kyverno
- Denial of service
- CVSS 8.3 High
Kyverno before 1.19.2 Denial of Service via Exponential-Time Wildcard Matching
- kyverno
- Denial of service
- CVSS 8.3 High
Kyverno before 1.19.2 Denial of Service via Nested Variable Substitution Loop
- kyverno
- Denial of service
- CVSS 5.3 Medium
laspy LAS File lasreader.py memory allocation
- laspy
- Denial of service
- CVSS 6.9 Medium
tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clients
- tsparticles
- @tsparticles mcp-server
- Denial of service
- CVSS 7.5 High
tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS
- tsparticles
- @tsparticles mcp-server
- Denial of service
- CVSS 5.3 Medium
NST Labs Tech Nstbrowser Local Agent Management Service stopAll stopAllBrowsers denial of service
- NST Labs Tech Nstbrowser
- Denial of service
- CVSS 7.5 High
h2o: heap exhaustion using capsules
- h2o
- Denial of service
- CVSS 3.3 Low
Multiple vulnerabilities that affects IBM Db2 Genius Hub
- IBM Db2 Genius Hub
- Denial of service
- CVSS 6.9 Medium
CESNET ipfixcol2 2.7.1 before 2.9.0 Memory Exhaustion via TCP LZ4 Decoder
- CESNET ipfixcol2
- Denial of service
- CVSS 7.5 High
Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser
- moleculer
- Denial of service
- CVSS 6.5 Medium
Zulip: Missing content-length limit on POST /messages/render allows denial-of-service via oversized requests
- zulip
- Denial of service
- CVSS 5.9 Medium
BIG-HKSCS decoding hang on crafted input
- The GNU C Library glibc
- Denial of service
-
jackson-dataformat-cbor: quadratic-time TagList growth on unbounded stacked tags (CPU/GC DoS, PoC)
- FasterXML jackson-dataformat-cbor
- Denial of service
- CVSS 8.7 High
FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest
- FreeRDP
- Denial of service
- CVSS 7.1 High
FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame
- FreeRDP
- Denial of service
- CVSS 8.7 High
FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event
- FreeRDP
- Denial of service
- CVSS 8.9 High
Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto
- Denial of service
>=3.4.0, <3.14.3 · fixed in 3.14.3
GHSA-cxjx-vmm2-qr8r · CVE-2026-118391 - CVSS 6.8 Medium
sngrep through 1.9.0 Infinite Loop DoS via Crafted NFLOG TLV
- irontec sngrep
- Denial of service
- CVSS 7.1 High
Apache ZooKeeper: Denial of service through unbounded memory allocation in multiRead request handling
- Apache Software Foundation Apache ZooKeeper
- Denial of service
- CVSS 8.7 High
Apache ZooKeeper: Unbounded recursion in snapshot serialization allows a client to render the server unrecoverable
- Apache Software Foundation Apache ZooKeeper
- Denial of service
-
Apache ActiveMQ NMS OpenWire Client Library: Unbounded/Unvalidated Length Fields in Apache.NMS.OpenWire Unmarshalling (DoS)
- Apache Software Foundation Apache ActiveMQ NMS OpenWire Client Library
- Denial of service
- CVSS 6.5 Medium
Apache ActiveMQ, ActiveMQ Broker: Repeated rejected temporary destination consumer requests can lead to broker OOM
- Apache Software Foundation Apache ActiveMQ
- Apache Software Foundation ActiveMQ Broker
- Denial of service
- CVSS 8.7 High
Pre-authentication upload parsing permits resource exhaustion
- SEPPmail AG SEPPmail Secure Email Gateway (SEG)
- Denial of service
- CVSS 7.5 High
WordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerability
- miniOrange SAML SP Single Sign On
- Denial of service
- CVSS 2.7 Low
Resource exhaustion vulnerability in HTTP request handling impacts Qt HTTP Server (QHttpServer)
- Qt Framework
- Denial of service
- CVSS 6.5 Medium
Memory leak in the Mbed TLS crypto shim on failed cipher/AEAD operations leads to remotely triggered crypto denial of service
- zephyr
- Denial of service
-
CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is set
- Denial of service
-
CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits
- Denial of service
-
CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrolling_list
- Denial of service
- CWE-625
-
CGI versions before 5.00 for Perl allow CPU exhaustion via a backtracking regex on the XForms multipart/related Content-Type
- Denial of service
-
CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used as a regex in parse
- Denial of service
- CWE-625
- CVSS 4.3 Medium
Tanium addressed an uncontrolled resource consumption vulnerability in Discover.
- Tanium Discover
- Denial of service
- CVSS 4.3 Medium
Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response.
- Tanium Threat Response
- Denial of service
- CVSS 8.8 High
Uncontrolled recursion in Google Chrome
- Google Chrome
- Denial of service
-
Resource leak in Devolutions Server
- Devolutions Server
- Denial of service
- CVSS 6.7 Medium
Unescaped header separators in whatstk build a regular expression that backtracks exponentially
- lucasrodes whatstk
- Denial of service
- CVSS 4.3 Medium
isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)
- isomorphic-git
- Denial of service
- CVSS 4.3 Medium
isomorphic-git: Unbounded memory allocation from attacker-controlled delta target size (DoS)
- isomorphic-git
- Denial of service
- CVSS 7.5 High
ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)
- Agamnentzar ag-psd
- Denial of service