Denial of service.

BIG-IP HTTP/2 vulnerability

• F5 BIG-IP
• F5 BIG-IP Next for Kubernetes
• Denial of service

DoS vulnerability in the vibration service.

• Huawei Harmony OS
• Huawei EMUI
• Denial of service

Resource allocation without limits in ASUS System Control Interface v3 and others

• ASUS System Control Interface v3
• ASUS System Control Interface
• Denial of service
• CWE-226

Uncontrolled recursion in BusyBox

• BusyBox
• Memory corruption
• Denial of service

Uncontrolled recursion in BusyBox

• BusyBox
• Memory corruption
• Denial of service

An issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the nni_qos_db_set function in broker_tcp.c component

• Denial of service

CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

• Adobe Content Credentials Rust SDK
• Adobe Content Credentials Command-Line Tool
• Denial of service

nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting

• Denial of service

>=0.2.0, <0.5.0 · fixed in 0.5.0

Netty: Denial of Service via Unbounded Headers in StompSubframeDecoder

• Denial of service

>=4.2.0.Alpha1, <4.2.16.Final || <4.1.136.Final · fixed in 4.2.16.Final, 4.1.136.Final

Resource allocation without limits in NVIDIA TensorRT-LLM

• NVIDIA TensorRT-LLM
• Denial of service

Reachable assertion in NVIDIA TensorRT-LLM

• NVIDIA TensorRT-LLM
• Denial of service

Ech0: ParseAcceptLanguage `_` separator bypass enables ~70x CPU amplification via Accept-Language header in i18n.Middleware

• Denial of service

* · no fixed version yet

Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser

• Denial of service

<0.71.0 · fixed in 0.71.0

Memory leak in NVIDIA Triton Inference Server

• NVIDIA Triton Inference Server
• Denial of service

Uncontrolled resource consumption in NVIDIA Triton Inference Server

• NVIDIA Triton Inference Server
• Denial of service

Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Denial of service

Uncontrolled resource consumption in NVIDIA Triton Inference Server

• NVIDIA Triton Inference Server
• Denial of service

MKP: Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory Exhaustion

• Denial of service

<0.4.1 · fixed in 0.4.1

Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions

• Denial of service

<1.12.8 · fixed in 1.12.8

Wasmtime: Memory leak in C API with `externref` and `anyref` types

• Denial of service

>=37.0.0, <37.0.2 · fixed in 37.0.2

Infinite loop on invalid input in golang.org/x/text

• Denial of service

<0.39.0 · fixed in 0.39.0

Windows DHCP Server Denial of Service Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Denial of service

Active Directory Federation Server Denial of Service Vulnerability

• Microsoft .NET Framework 3.5 AND 4.7.2
• Microsoft .NET Framework 3.5 AND 4.8
• Denial of service

Windows Active Directory Federation Services Denial of Service Vulnerability

• Microsoft .NET Framework 3.5 AND 4.7.2
• Microsoft .NET Framework 3.5 AND 4.8
• Denial of service

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Denial of service

HTTP/2 Denial of Service Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Denial of service

HTTP.sys Denial of Service Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Denial of service

OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability

• Microsoft AspNet.OData
• Microsoft AspNetCore.OData
• Denial of service

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Denial of service

Windows Secure Channel Denial of Service Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Denial of service

Azure Active Directory Denial of Service Vulnerability

• Microsoft Azure Active Directory
• Microsoft .NET Framework 3.5
• Denial of service

Windows Active Directory Denial of Service Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Denial of service

OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability

• Microsoft AspNet.OData
• Microsoft AspNetCore.OData
• Denial of service

Resource exhaustion in quiche HTTP/3 and QPACK layers

• Cloudflare quiche
• Denial of service

Infinite loop in Roundcube Webmail

• Roundcube Webmail
• Denial of service

Resource allocation without limits in Roundcube Webmail

• Roundcube Webmail
• Denial of service

DBI::ProfileData versions before 1.651 for Perl do not limit the path index

• HMBRAND DBI::ProfileData
• Denial of service

Unbounded path event queue growth in quiche via peer-driven source connection ID rotation

• Cloudflare quiche
• Denial of service

1734 POINT I/OTM - Denial of Service via Malformed Inputs on CIP Object

• Rockwell Automation 1734 POINT I/O
• Denial of service

1718-AENTR/1719-AENTR - Denial of Service

• Rockwell Automation 1718-AENTR/1719-AENTR
• Denial of service

open62541 Shared Client ua_client_connect.c responseReadNamespacesArray null pointer dereference

• open62541
• Denial of service
• Memory corruption

Resource allocation without limits in Siemens SIMATIC S7-PLCSIM Advanced

• Siemens SIMATIC S7-PLCSIM Advanced
• Denial of service

Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size cap and exhaust client memory

• Denial of service

>=0.1.0, <1.9.2 · fixed in 1.9.2

Unbounded HTTP/1 response-header and chunked-trailer accumulation in Mint causes memory-exhaustion DoS

• Denial of service

>=0.1.0, <1.9.2 · fixed in 1.9.2

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, in the interaction model command processing logic.

• Denial of service

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.2, specifically within the Level Control cluster's periodic server tick logic.

• Denial of service

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru 1.4, specifically within the Level Control cluster's server tick logic (`emberAfLevelControlClusterServerTickCa…

• Denial of service

json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS

• Denial of service

<0.60.1 · fixed in 0.60.1

HedgeDoc: Denial-of-service via YAML alias expansion in note frontmatter

• hedgedoc
• Denial of service
• CWE-409

HedgeDoc: Rate-limit bypass via CF-Connecting-IP header spoofing

• hedgedoc
• Authentication bypass
• Denial of service

vsock/virtio: fix zerocopy completion for multi-skb sends

• Linux kernel
• Denial of service

Crafted message attachment causes client-side denial of service via markdown parser regex backtracking in Mattermost

• Mattermost
• Denial of service

A Denial of Service (DoS) vulnerability exists in the receive loop of libmodbus 3.1.12 when running on Windows.

• Denial of service

Host-triggerable control-endpoint wedge (DoS) in Nuvoton NuMaker HSUSBD UDC driver

• zephyr
• Denial of service

h2o: musl libc stack overflow (QPACK)

• h2o
• Denial of service

RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS

• rabbitmq-server
• Denial of service

RabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size

• rabbitmq-server
• Denial of service

CredSweeper: Recursive archive size-limit bypass in deep scanner allows crafted compressed inputs to exhaust resources

• Denial of service
• CWE-409

>=1.4.9, <1.16.0 · fixed in 1.16.0

Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/Panic DoS)

• Denial of service

<2.11.0 · fixed in 2.11.0