Advisories · Weakness
Denial of service.
Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 6.5 Medium
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
- Elasticsearch
- Denial of service
- CVSS 6.5 Medium
Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service
- Elasticsearch
- Denial of service
- CVSS 6.5 Medium
Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service
- Elasticsearch
- Denial of service
- CVSS 6.5 Medium
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
- Elasticsearch
- Denial of service
- CVSS 4.3 Medium
Inefficient Algorithmic Complexity in Elasticsearch Leading to Denial of Service
- Elasticsearch
- Denial of service
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
- Elasticsearch
- Denial of service
- CVSS 6.5 Medium
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
- Elasticsearch
- Denial of service
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 5.3 Medium
Calix GigaSpire Web Management utilities_configurationsave.cgi denial of service
- Calix GigaSpire
- Denial of service
- CVSS 7.5 High
IBM i is Affected By Multiple Vulnerabilities in Host Servers
- i
- Denial of service
- CVSS 7.5 High
IBM i is Affected By Multiple Vulnerabilities in Host Servers
- i
- Denial of service
- CVSS 7.5 High
IBM i is Affected By Multiple Vulnerabilities in Host Servers
- i
- Denial of service
- CVSS 6.5 Medium
vLLM: Completion prompt lists fan out into unbounded engine requests
- Denial of service
>=0.19.0, <0.26.0 · fixed in 0.26.0
GHSA-87x5-vmc3-756j · CVE-2026-73559 - CVSS 6.5 Medium
Infinite loop (DoS) in Bluetooth GATT client parsing of Read-By-Type responses with zero data length
- zephyr
- Denial of service
- CVSS 8.7 High
rsync < 3.5.0 Algorithmic Complexity DoS via hash_search()
- rsync
- Denial of service
- CVSS 8.7 High
rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion
- rsync
- Denial of service
- CVSS 7.1 High
rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT
- rsync
- Memory corruption
- Denial of service
- CVSS 8.7 High
rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall
- rsync
- Denial of service
- CVSS 7.5 High
Unbounded Memory Growth in QUIC Server Incoming Channel Queue
- OpenSSL
- Denial of service
- CVSS 7.5 High
crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in RubyLLM::Utils.underscore on Ruby 3.1.x.
- Denial of service
- CVSS 7.5 High
Acm-search-v2-api-rhel9: search-v2-api: unbounded tokenreviews cache allows unauthenticated memory-exhaustion dos
- Red Hat Advanced Cluster Management for Kubernetes 2.11
- Red Hat Advanced Cluster Management for Kubernetes 2.13
- Denial of service
- CVSS 6.5 Medium
Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Denial of service
- CVSS 3.3 Low
IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak
- IBM Db2
- Denial of service
- CVSS 5.3 Medium
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- IBM Security Verify Access
- IBM Verify Identity Access
- Denial of service
- CVSS 8.5 High
Storage volume cross-project move and snapshot restore bypass project disk limits
- Canonical LXD
- Denial of service
- CVSS 5.3 Medium
Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
- CVSS 7.5 High
IBM i is Affected By Multiple Vulnerabilities in the Debug Server
- i
- Denial of service
- CVSS 7.5 High
IBM i is Affected By A Denial of Service Vulnerability []
- i
- Denial of service
- CVSS 5.0 Medium
Resource allocation without limits in Fortinet FortiOS
- Fortinet FortiOS
- Denial of service
- CVSS 3.5 Low
Velociraptor DoS triggered by Divide by Zero panic
- Rapid7 Velociraptor
- Denial of service
- CVSS 7.5 High
Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths
- RRWO Net::CIDR::Set
- Denial of service
- CWE-1284
- CVSS 8.7 High
Unauthenticated Denial of Service
- Phoenix Contact AXC F 1152
- Phoenix Contact AXC F 1252
- Denial of service
- CVSS 5.3 Medium
Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service
- Open5GS
- Denial of service
- CVSS 5.3 Medium
Open5GS HSS Service fd_msg_sess_get denial of service
- Open5GS
- Denial of service
- CVSS 6.5 Medium
Uncontrolled resource consumption in Samsung Open Source rlottie
- Samsung Open Source rlottie
- Denial of service
- CVSS 6.9 Medium
Open5GS CER init.c diam_log_func assertion
- Open5GS
- Denial of service
- CVSS 7.1 High
Malcolm has Uncontrolled Resource Consumption in Archive Extraction (Inode-Exhaustion DoS)
- cisagov Malcolm
- Denial of service
- CVSS 8.7 High
Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos
- MongoDB Server
- Denial of service
- CVSS 7.1 High
Improper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service
- MongoDB Server
- Denial of service
- CVSS 5.3 Medium
Improper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service
- MongoDB Server
- Denial of service
- CVSS 6.5 Medium
coturn: mobility disconnects bypass allocation quotas and exhaust relay capacity
- coturn
- Denial of service
- CVSS 7.1 High
The coturn server can end in a state where it does not accept more requests with "even-port" enabled.
- coturn
- Denial of service
- CVSS 6.9 Medium
Nmap 7.99 Denial of Service via Zero-Length TCP Option Packet
- Nmap
- Denial of service
- CVSS 8.2 High
coturn allocates a full per-peer SSL/session before verifying the DTLS cookie, enabling source-spoofing/botnet state-exhaustion DoS
- coturn
- Denial of service
- CVSS 6.5 Medium
Windows DHCP Client Denial of Service Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Denial of service
- CVSS 7.5 High
Remote Procedure Call Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
- CVSS 6.2 Medium
CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
- Adobe Content Credentials Rust SDK
- Adobe Content Credentials Command-Line Tool
- Denial of service
- CVSS 6.2 Medium
CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
- Adobe Content Credentials Rust SDK
- Adobe Content Credentials Command-Line Tool
- Denial of service
- CVSS 7.5 High
CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
- Adobe Content Credentials Rust SDK
- Adobe Content Credentials Command-Line Tool
- Denial of service
- CVSS 6.9 Medium
Uncontrolled resource consumption in Intel(R) PROSet/Wireless WiFi Software for Windows
- Intel(R) PROSet/Wireless WiFi Software for Windows
- Denial of service
- CVSS 6.2 Medium
Velociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS Volumes
- Rapid7 Velociraptor
- Memory corruption
- Denial of service
- CVSS 5.3 Medium
Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Denial of service
- CVSS 7.5 High
Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Denial of service
- CVSS 7.5 High
Undertow-core: oom via missing limits in chunked trailer in eap's undertow
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Denial of service
- CVSS 4.3 Medium
Claircore: claircore: denial of service via unchecked type assertion in rpm header parser
- Red Hat Advanced Cluster Security 4
- Red Hat Quay 3
- Denial of service
- CVSS 6.5 Medium
Resource allocation without limits in Samsung Open Source rlottie
- Samsung Open Source rlottie
- Denial of service
- CWE-1284
- CVSS 4.3 Medium
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
- SAP_SE SAP Business AI Platform (Approuter)
- Denial of service
- CVSS 5.9 Medium
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
- SAP_SE SAP Business AI Platform (Approuter)
- Denial of service