Denial of service.

Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated APP13 markers in i_readjpeg_wiol

• TONYC Imager::File::JPEG
• Denial of service

mint buffers an entire chunked response chunk in memory in Mint.HTTP1.decode_body/5

• Denial of service

>=0.5.0, <1.9.1 · fixed in 1.9.1

Uncontrolled Resource Consumption vulnerability in Apache IoTDB. 

• Denial of service

>=1.3.3, <2.0.8 · fixed in 2.0.8

Unauthenticated denial-of-service via unbounded HPACK integer decoding in hpax

• Denial of service

>=0.1.1, <1.0.4 · fixed in 1.0.4

Stackrox: stackrox: unbounded graphql query depth allows authenticated denial of service

• Red Hat Advanced Cluster Security 4.9
• Red Hat Advanced Cluster Security for Kubernetes 4.11
• Denial of service

GPAC TeXML File load_text.c txtin_probe_duration divide by zero

• GPAC
• Denial of service

GPAC Media File write_nhml.c nhmldump_send_frame null pointer dereference

• GPAC
• Denial of service
• Memory corruption

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder

• SRI Mojo::JSON
• Denial of service

Unbounded page slicing from attacker-controlled CSS height causes denial of service

• Denial of service

>=0.0.0-0, <0.19.0 · fixed in 0.19.0

Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service)

• Denial of service

>=0.0.0-0, <0.26.0 · fixed in 0.26.0

HdrHistogram AbstractHistogram.java memory allocation

• HdrHistogram
• Denial of service

HdrHistogram AbstractHistogram.java memory allocation

• HdrHistogram
• Denial of service

connorskees grass visitor denial of service

• connorskees grass
• Denial of service

connorskees grass UTF-8 Character raw_to_parse_error denial of service

• connorskees grass
• Denial of service

RT-Thread Parameter lwp_syscall.c sys_ioctl divide by zero

• RT-Thread
• Denial of service

NousResearch hermes-agent HTTP API run_agent.py AIAgent.run_conversation denial of service

• NousResearch hermes-agent
• Denial of service

omec-project amf NGSetupRequest handler.go denial of service

• omec-project amf
• Denial of service

omec-project amf NGAP Message RRCInactiveTransitionReport denial of service

• omec-project amf
• Denial of service

Open5GS AMF nnrf-handler.c amf_nnrf_handle_nf_discover denial of service

• Open5GS
• Denial of service

Gitea git grep searches allow server resource exhaustion

• Denial of service

<1.25.5 · fixed in 1.25.5

WS Auto-PONG memory exhaustion

• curl
• Denial of service

QUIC zero-length UDP datagrams busy-loop

• curl
• Denial of service

IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload

• libreswan
• Weak cryptography or TLS
• Denial of service

IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload

• libreswan
• Weak cryptography or TLS
• Denial of service

IKEv2 Denial of Service via malformed fragmentation

• libreswan
• Denial of service
• CWE-193

golang.org/x/image/tiff has excessive resource consumption in PackBits decompression

• Denial of service

<0.41.0 · fixed in 0.41.0

Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetch

• Denial of service
• CWE-20

<3.4.0 || >=4.0.0, <4.2.0 · fixed in 3.4.0, 4.2.0

SimpleSAMLphp has Possible DoS via XPath Transform

• Denial of service

<4.19.3 || >=4.20.0, <4.20.3 · fixed in 4.19.3, 4.20.3

Zebra Address Book Aborted by IPv4-Mapped Mempool Misbehavior Update

• Denial of service
• Memory corruption

<4.5.0 · fixed in 4.5.0

@asymmetric-effort/nogginlessdom vulnerable to ReDoS via user-controlled regex in HTMLInputElement pattern validation

• Denial of service

<0.0.22 · fixed in 0.0.22

jsonata: Malicious inputs to "$toMillis" function can cause resource exhaustion

• Denial of service

<1.8.9 || >=2.0.0, <2.2.0 · fixed in 1.8.9, 2.2.0

zebrad has unbounded memory leak in mempool download pipeline via timeout path cancel_handles retention

• Denial of service

<4.5.0 · fixed in 4.5.0

Zebra has pre-handshake buffer capacity reservation based on attacker-claimed body length

• Denial of service

<4.5.0 · fixed in 4.5.0

Pathway - Unauthenticated Denial of Service via Exponential Glob Pattern Matching in Document Store

• pathway
• Denial of service

zebrad has mempool transaction admission denial via single-peer inbound queue saturation

• Denial of service

<4.5.0 · fixed in 4.5.0

LobeChat < 2.2.10-canary.15 - Regular Expression Denial of Service in GitHub Skill Import

• lobehub
• Denial of service

zebrad vulnerable to full node denial of service via crafted Sapling receiver in z_listunifiedreceivers

• Denial of service
• CWE-20

<4.5.0 · fixed in 4.5.0

zebrad vulnerable to getblocks/getheaders locator CPU amplification via uncapped vector length

• Denial of service

<8.0.0 · fixed in 8.0.0

@conform-to/dom parseSubmission vulnerable to CPU exhaustion when parsing many unique form fields

• Denial of service

>=1.8.0, <1.19.4 · fixed in 1.19.4

Eclipse Wakaama CoAP Block1 Handler Unbounded Memory Allocation DoS

• wakaama
• Denial of service

SSH SFTP server denial of service via extended channel data infinite loop

• Erlang OTP
• Denial of service

GetEndpoints Memory Exhaustion in open62541

• open62541
• Denial of service

Uncontrolled resource consumption in Eclipse Foundation Eclipse Parsson

• Eclipse Foundation Eclipse Parsson
• Denial of service

FindServers Memory Exhaustion in open62541

• open62541
• Denial of service

An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_445C5C component

• Denial of service

pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go.

• Denial of service

Mailpit: Sibling-endpoint memory-exhaustion DoS via unbounded JSON body on /api/v1/messages, /api/v1/tags, and /api/v1/message/{id}/release (incomplete fix of GHSA-fpxj-m5q8-fphw)

• Denial of service

<1.30.1 · fixed in 1.30.1

SurrealDB vulnerable to pre-auth memory amplification via unbounded `/sql` WebSocket frames

• Denial of service

<3.1.0 · fixed in 3.1.0

SurrealDB vulnerable to Denial of Service due to nested types annotations

• Denial of service

<3.1.0 · fixed in 3.1.0

SurrealDB has Denial of Service in JSON parser due to nested objects

• Denial of service

<3.1.0 · fixed in 3.1.0

Apache HttpComponents Core: HPackDecoder Unlimited Header List Size Before SETTINGS ACK

• Denial of service

<5.4.3 || >=5.5-alpha1, <5.5-beta2 · fixed in 5.4.3, 5.5-beta2

Apache HttpComponents Core HTTP/1 header parsing can cause memory-exhaustion denial of service

• Denial of service

<5.4.3 || >=5.5-alpha1, <5.5-beta2 · fixed in 5.4.3, 5.5-beta2

Open Babel has out-of-bounds read in PQS lowerit (pre-buffer read)

• Memory corruption
• Denial of service

<3.2.0 · fixed in 3.2.0

Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt

• Denial of service
• Memory corruption

<3.2.0 · fixed in 3.2.0

Open Babel has NULL pointer dereference in ChemKinFormat::ReadReactionQualifierLines

• Denial of service
• Memory corruption

<3.2.0 · fixed in 3.2.0

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

• Elasticsearch
• Denial of service

Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

• Elastic Kibana
• Denial of service

ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability

• Cisco Secure Endpoint
• Denial of service

Allocation of Resources Without Limits or Throttling in Fleet Server Leading to Denial of Service

• Elastic Fleet Server
• Denial of service

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

• Elasticsearch
• Denial of service