Denial of service.

Socket file-descriptor leak in UpdateHub OTA client start_coap_client() leading to resource-exhaustion DoS

• zephyr
• Denial of service

Mastodon: Exhausting data by an unauthenticated request to the admin retention API

• mastodon
• Denial of service
• CWE-405

CyberChef’s pretty-recipe parser vulnerable to client-side ReDoS / CPU exhaustion when parsing a malformed #recipe= URL

• gchq CyberChef
• Denial of service

Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Denial of service

Unauthenticated Resource Exhaustion

• TBEA TLogger (TBEA Communication Box 3rd Generation)
• Denial of service

IB/mad: Drop unmatched RMPP responses before reassembly

• Linux kernel
• Denial of service

drm/xe/vm: Fix SVM leak on resv obj alloc failure in xe_vm_create()

• Linux kernel
• Denial of service

drm/gpusvm: publish dpagemap early to avoid device mapping leak on error

• Linux kernel
• Denial of service

media: pwc: Return queued buffers on start_streaming() failure

• Linux kernel
• Denial of service

media: rtl2832_sdr: Return queued buffers on start_streaming() failure

• Linux kernel
• Denial of service

sctp: close UDP tunnel sockets during netns teardown

• Linux kernel
• Denial of service

gve: fix Rx queue stall on alloc failure

• Linux kernel
• Denial of service

drm/amdgpu: fix division by zero with invalid uvd dimensions

• Linux kernel
• Denial of service

audit: fix recursive locking deadlock in audit_dupe_exe()

• Linux kernel
• Denial of service

HID: wacom: stop hardware after post-start probe failures

• Linux kernel
• Denial of service

Uncontrolled Memory Allocation in GNU cpio

• GNU cpio
• Denial of service

Keras model loading is vulnerable to denial of service through HDF5 shape bombs

• Denial of service

<3.15.0 · fixed in 3.15.0

Apache IoTDB: RPC service denial of service via unchecked Thrift string length

• Apache Software Foundation Apache IoTDB
• Denial of service

Almico Speedfan MSR Index speedfan.sys KiSystemCall64 memory leak

• Almico Speedfan
• Denial of service

lmammino oidc-authorizer Authorization Header Parsing parse_token_from_header.rs parse_token_from_header denial of service

• lmammino oidc-authorizer
• Denial of service

WP Maps Pro < 6.1.3 - Unauthenticated Denial of Service

• WP MAPS PRO
• Denial of service

Bouncy Castle: the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound

• Denial of service

>=2.1.0, <2.1.3 · fixed in 2.1.3

Bouncy Castle: Zeroisation of sensitive key material on garbage collection relies on finalization.

• Denial of service

<1.0.2.7 || >=2.0.0, <2.0.2 || >=2.1.0, <2.1.3 · fixed in 1.0.2.7, 2.0.2, 2.1.3

HAPI FHIR: XHTML narrative parser unbounded recursion causes StackOverflow denial of service

• hapifhir org.hl7.fhir.core
• hapifhir ca.uhn.hapi.fhir:org.hl7.fhir.r5
• Denial of service
• CWE-20

HAPI FHIR: JSON utility parser unbounded recursion causes StackOverflow denial of service

• hapifhir org.hl7.fhir.core
• hapifhir ca.uhn.hapi.fhir:org.hl7.fhir.r5
• Denial of service
• CWE-20

pypdf: Possible large memory usage for large /ToUnicode streams

• Denial of service

<6.15.0 · fixed in 6.15.0

Unauthenticated denial of service via unbounded request body processing

• HashiCorp Consul
• HashiCorp Consul Enterprise
• Denial of service

Unauthenticated denial of service via unbounded external gRPC connection acceptance

• HashiCorp Consul
• HashiCorp Consul Enterprise
• Denial of service

gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote DoS via DecodingLayerParser

• gopacket
• Memory corruption
• Denial of service

Uncontrolled resource consumption in the Consul Connect CA roots endpoint

• HashiCorp Consul
• HashiCorp Consul Enterprise
• Denial of service

Uncontrolled resource consumption in the Consul Connect authorization endpoint

• HashiCorp Consul
• HashiCorp Consul Enterprise
• Denial of service

Malicious Link Control Frames Can Cause Loss of CPDLC Functions

• ATN-B1 CPDLC
• Denial of service

In CPDLC, Broadcast Control Frames Can Disconnect Multiple Aircraft Simultaneously

• ATN-B1 CPDLC
• Denial of service

pypdf: Possible long runtimes/large memory usage for large CID font width ranges

• Denial of service

<6.15.0 · fixed in 6.15.0

Hono: Algorithmic Complexity DoS in Language Middleware

• Denial of service

>=4.12.0, <4.12.34 · fixed in 4.12.34

pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors

• Denial of service

<11.0.1 · fixed in 11.0.1

Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state

• Denial of service
• CWE-703

<4.1.136.Final || >=4.2.0-Final, <4.2.16.Final · fixed in 4.1.136.Final, 4.2.16.Final

SvelteKit: ReDoS (O(n^2)) in content negotiation — unauthenticated DoS via the Accept header

• Denial of service

<2.70.2 · fixed in 2.70.2

Atom Exhaustion via _entities Representation Keys in DivvyPayHQ absinthe_federation

• Denial of service

>=0.1.0, <0.9.3 · fixed in 0.9.3

WP Maps < 4.9.7 - Subscriber+ Denial of Service

• WP Maps
• Denial of service

In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CONNECT packets.

• Denial of service

node-re2: String.prototype.replace(re2, template) aborts the Node process (uncatchable ToLocalChecked on empty MaybeLocal) when the result exceeds V8's max string length

• Denial of service

<1.25.1 · fixed in 1.25.1

OpenReception's bootstrap challenge proof-of-work difficulty hardcoded to 16 bits, which enables abuse rate amplification

• open-reception appointment-booking-software
• Denial of service

league/commonmark: Denial of service via colliding heading slugs

• Denial of service

>=2.0.0, <2.9.0 · fixed in 2.9.0

league/commonmark: Denial of service via duplicate footnote definitions

• Denial of service

>=1.5.0, <2.9.0 · fixed in 2.9.0

league/commonmark: Denial of service via adjacent inline attribute blocks

• Denial of service

>=1.5.0, <2.9.0 · fixed in 2.9.0

league/commonmark: Quadratic-time denial of service when parsing crafted Markdown

• Denial of service
• CWE-1050

>=0.6.0, <2.9.0 · fixed in 2.9.0

JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported

• Denial of service

>=3.0.0, <3.15.1 || >=4.0.0, <4.3.1 · fixed in 3.15.1, 4.3.1

Mermaid XY Charts are vulnerable to an infinite loop DoS

• Denial of service
• CWE-1325

>=10.6.0, <10.9.8 || >=11.0.0-alpha.1, <11.16.1 · fixed in 10.9.8, 11.16.1

XML External Entity (XXE) Injection via Schema Validation in Multiple WSO2 Products Allows File Reading and Denial of Service

• WSO2 API Manager
• WSO2 Universal Gateway
• Denial of service

Quadratic sibling re-flattening in the html_sanitize_ex traversal engine allows CPU-exhaustion denial of service

• Denial of service

>=0.3.1, <1.4.5 || >=1.5.0-rc.0, <1.5.3 · fixed in 1.4.5, 1.5.3

Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of service

• Denial of service

>=0.3.1, <1.4.5 || >=1.5.0-rc.0, <1.5.3 · fixed in 1.4.5, 1.5.3

Apache Portable Runtime Utility: apr-util XML stack recursion crash

• Apache Software Foundation Apache Portable Runtime Utility
• Denial of service

Sonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCache

• Eukaryot sonic3air
• Denial of service

Apache CXF: Denial of service via message header attachments

• Apache Software Foundation Apache CXF
• Denial of service

Apache CXF: No default restriction on the amount of form parameters per message

• Apache Software Foundation Apache CXF
• Denial of service

Apache CXF: Denial of Service attack via large attachments

• Apache Software Foundation Apache CXF
• Denial of service

Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Denial of service

HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open

• The HDF Group HDF5
• Denial of service

Nuxt: Unauthenticated CPU exhaustion parsing and hashing the Nuxt island endpoint body before hash validation

• Denial of service

>=3.1.0, <3.21.10 || >=4.0.0, <4.5.1 · fixed in 3.21.10, 4.5.1