Denial of service.

Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

• Elasticsearch
• Denial of service

Pipewire: pulse server alloca stack overflow

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Denial of service

Poly Voice Devices (CCX, Trio, Edge E) – Potential Denial of Service

• HP Inc CCX
• HP Inc Trio C60
• Denial of service

FatFs Infinite Loop in GPT Partition Scan

• ChaN FatFs
• Denial of service

FatFs Divide-by-Zero in exFAT Sync

• ChaN FatFs
• Denial of service

Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling

• Red Hat Enterprise Linux 10
• Denial of service

DVP80ES3 Improper Resource Shutdown or Release Vulnerability

• deltaww DVP80ES3
• Denial of service

Denial-of-service via malicious LDAP address-book server

• Mozilla Thunderbird
• Denial of service

A division-by-zero vulnerability in the CStreamSwitcherOutputPin::DecideBufferSize function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service (DoS) via a craf…

• Denial of service

OFFIS DCMTK Toolkit Missing Release of Memory after Effective Lifetime

• OFFIS DICOM DCMTK Toolkit
• Denial of service

OFFIS DCMTK Toolkit Missing Release of Memory after Effective Lifetime

• OFFIS DICOM DCMTK Toolkit
• Denial of service

Vulnerabilities found in Watson Data Intelligence

• IBM watsonx.data intelligence
• Denial of service

IBM WebSphere eXtremes Scale is affected by uncontrolled resource consumption when XDF is enabled

• IBM WebSphere Extreme Scale
• Denial of service

Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence

• Denial of service
• Memory corruption

<3.2.0 · fixed in 3.2.0

Sigstore Timestamp Authority has OOM due to unbounded metric label cardinality

• Denial of service

<=1.2.9 · no fixed version yet

RabbitMQ vulnerable to Denial of Service by publishing large messages over the HTTP API

• Denial of service

>=3.11.0, <3.11.24 || >=3.12.0, <3.12.7 · fixed in 3.11.24, 3.12.7

Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing

• Denial of service

>=2.0.0-preview.11, <2.7.5 || >=3.0.0, <3.5.4 · fixed in 2.7.5, 3.5.4

fzf vulnerable to denial of service through quadratic HTTP request-body accumulation

• Denial of service

<0.73.1 · fixed in 0.73.1

Denial of service via malformed HTTP/2 requests

• NetScaler ADC
• NetScaler Gateway
• Denial of service

Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker have Memory Allocation with Excessive Size Value vulnerability

• Denial of service

<5.19.8 || >=6.0.0, <6.2.7 · fixed in 5.19.8, 6.2.7

Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have a Denial of Service via Out of Memory vulnerability

• Denial of service

>=5.19.7, <5.19.8 || >=6.2.6, <6.2.7 · fixed in 5.19.8, 6.2.7

Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All has a Memory Allocation with Excessive Size Value vulnerability

• Denial of service

<5.19.8 || >=6.0.0, <6.2.7 · fixed in 5.19.8, 6.2.7

Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input

• SANKO Net::BitTorrent
• Denial of service

Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via an uncapped peer-wire message-length prefix

• SANKO Net::BitTorrent
• Denial of service

Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec

• Apache Software Foundation Apache ActiveMQ
• Apache Software Foundation Apache ActiveMQ All
• Denial of service

DVP-12SE Exposure of Sensitive Information Vulnerability

• deltaww DVP-12SE
• Denial of service

An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_44af70 component

• Denial of service

Deadlock denial of service in USB CDC-NCM device class on TX enqueue failure

• zephyr
• Denial of service

JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call to minify(), allowing unbounded memory growth

• GTERMARS JavaScript::Minifier::XS
• Denial of service

CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away

• GTERMARS CSS::Minifier::XS
• Denial of service

Atom-table exhaustion denial-of-service via JSON parse_document in MDEx

• Denial of service

>=0.4.3, <0.13.2 · fixed in 0.13.2

Uncontrolled recursion over deeply nested Markdown crashes the BEAM in mdex

• Denial of service

>=0.3.0, <0.12.3 · fixed in 0.12.3

Unbounded native memory leak in mdex escaped-tag rendering enables unauthenticated denial of service

• Denial of service

>=0.11.0, <0.12.3 · fixed in 0.12.3

Unbounded memory allocation in highlight_lines range expansion in mdex

• Denial of service

>=0.11.0, <0.12.3 · fixed in 0.12.3

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Denial of service

GPAC ISOBMFF base_encoding.c data amplification

• GPAC
• Denial of service
• CWE-409

78 xiaozhi-esp32 MQTT Goodbye mqtt_protocol.cc GetInstance denial of service

• 78 xiaozhi-esp32
• Denial of service

ImageMagick: Memory Leak in wand option parser when providing invalid arguments

• Denial of service

<14.14.0 · fixed in 14.14.0

Nezha Monitoring: Unbounded WebSocket Streams — Resource Exhaustion DoS

• Denial of service

>=1.0.0, <2.2.0 · fixed in 2.2.0

js-toml vulnerable to CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals

• Denial of service

<1.1.2 · fixed in 1.1.2

@cardano402/mcp-server missing spending limits, LAN-exposed HTTP transport, and SSRF via catalog.server.url

• Path traversal
• Denial of service

<0.1.2 · fixed in 0.1.2

Scriban: ExpressionDepthLimit guard is non-enforcing — parser-recursion DoS in 6.6.0–7.2.0 (incomplete fix for GHSA-wgh7-7m3c-fx25 / GHSA-p6q4-fgr8-vx4p)

• Denial of service

>=6.6.0, <7.2.1 · fixed in 7.2.1

Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4792-22hx

• Denial of service

>=3.0.0, <7.2.1 · fixed in 7.2.1

joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization

• Denial of service

>=1.3.4, <1.6.7 · fixed in 1.6.7

python-socketio: Binary attachment accumulation can cause denial of service

• Denial of service

<5.16.2 · fixed in 5.16.2

python-engineio has unbound thread allocation that can cause denial of service

• Denial of service

<4.13.2 · fixed in 4.13.2

python-engineio has possible denial of service due to maximum payload size sometimes not being enforced

• Denial of service

<4.13.2 · fixed in 4.13.2

LinkifyIt#match scan loop has quadratic algorithmic complexity

• Denial of service

<5.0.1 · fixed in 5.0.1

Hysteria: http large header with sniff cause server DoS

• Denial of service

<2.9.2 · fixed in 2.9.2

Hysteria vulnerable to server crash when max_datagram_frame_size very small

• Denial of service

<2.9.2 · fixed in 2.9.2

fluent-plugin-opentelemetry Has Denial of Service (DoS) via Large Payloads and Decompression Bombs in `in_opentelemetry`

• Denial of service
• CWE-409

<0.5.3 · fixed in 0.5.3

fluent-plugin-s3 Vulnerable to Denial of Service (DoS) via Decompression Bomb in `in_s3`

• Denial of service
• CWE-409

>=0.7.0, <1.8.5 · fixed in 1.8.5

AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock

• Significant-Gravitas AutoGPT
• Denial of service
• CWE-405

AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock

• Significant-Gravitas AutoGPT
• Denial of service

Apache Kerby vulnerable to denial of service

• Denial of service

<2.1.2 · fixed in 2.1.2

Integer overflow in node

• node
• Memory corruption
• Denial of service

Uncontrolled resource consumption in node

• node
• Denial of service

Apicurio Registry is vulnerable to denial of service through XML entity expansion

• Denial of service

>=3.3.0, <3.3.1 || <3.2.6 · fixed in 3.3.1, 3.2.6

KubeVirt downward metrics virtio-serial server vulnerable to unbounded memory consumption

• Denial of service

>=1.1.0-alpha.0, <=1.10.0-rc.0 · no fixed version yet

An issue in the DSO::mmap_and_copy function of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via loading a crafted shared library.

• Denial of service