Denial of service.

division by zero in libpcap before 1.10.7

• The Tcpdump Group libpcap
• Denial of service

abort() in libpcap before 1.10.7 on an invalid BPF opcode

• The Tcpdump Group libpcap
• Denial of service

Unbounded memory growth from GRAFT messages for unsubscribed topics

• Denial of service

>=0.0.0-0, <0.49.5 · fixed in 0.49.5

vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m

• Denial of service

<0.26.0 · fixed in 0.26.0

vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds

• Denial of service

<0.26.0 · fixed in 0.26.0

ramon-victor freegpt-webui Jailbreak Mode backend.py getJailbreak allocation of resources

• ramon-victor freegpt-webui
• Denial of service

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

• IBM App Connect Enterprise
• IBM Integration Bus for z/OS
• Denial of service

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

• IBM App Connect Enterprise
• IBM Integration Bus for z/OS
• Denial of service

IBM i is Affected By Multiple Vulnerabilities in Debug Server

• i
• Denial of service

Multiple vulnerabilities in IBM MQ Agent images

• IBM MQ Agent
• Denial of service

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

• IBM App Connect Enterprise
• IBM Integration Bus for z/OS
• Denial of service

Chroma 1.5.9 Unbounded HNSW Index Parameters Memory Exhaustion

• chroma
• Denial of service

Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoS

• Denial of service

>=0.1.0, <1.10.0 · fixed in 1.10.0

Quadratic chunk-size parsing in Mint.HTTP1.Parse allows CPU-exhaustion DoS

• Denial of service

>=1.9.3, <1.10.0 · fixed in 1.10.0

Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it queries

• Denial of service
• CWE-405

SiYuan before v3.8.2 Unbounded Memory Consumption via ControlConcurrency

• siyuan
• Denial of service

SiYuan before v3.8.2 Denial of Service via Auth Throttle

• siyuan
• Denial of service

SiYuan before v3.8.2 Unbounded Session Creation via Basic Auth

• siyuan
• Denial of service

SiYuan before v3.8.2 Denial of Service via unauthenticated UI-process registration

• siyuan
• Denial of service

Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Denial of service

Memory leak in scan method

• Softing smartLink HW-PN
• Denial of service

Eleveo Quality Management Conversation events denial of service

• Eleveo Quality Management
• Denial of service

Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service (DoS) attacks.

• Denial of service

Parrot AR.Drone 1 and AR.Drone 2 are vulnerable to Denial of Service.

• Denial of service

MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustion

• themoos core-moos
• Denial of service

MOOS-IvP through 24.8.1 pMarineViewer Unbounded Memory Consumption via NODE_REPORT

• moos-ivp
• Denial of service

MOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State Retention

• moos-ivp
• Denial of service

MOOS-IvP through 24.8.1 pRealm Unbounded REALMCAST_REQ Subscription Denial of Service

• moos-ivp
• Denial of service

MOOS-IvP through 24.8.1 uFldNodeComms Quadratic Processing Denial of Service

• moos-ivp
• Denial of service

MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Count

• moos-ivp
• Denial of service

MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Service

• themoos core-moos
• Denial of service

MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet Allocation

• themoos core-moos
• Denial of service

toml-node: Uncontrolled Recursion

• Denial of service

<4.2.0 · fixed in 4.2.0

stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)

• Denial of service

<3.5.0 · fixed in 3.5.0

Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph

• Xpdf
• Denial of service

amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload

• Denial of service

<1.13.0 · fixed in 1.13.0

LiquidJS has an infinite loop vulnerability in its `strip_html` filter

• Denial of service

>=10.26.0, <10.27.1 · fixed in 10.27.1

WordPress Migrate Guru – Site Migration & Cloning plugin <= 6.65 - Denial of Service Attack vulnerability

• migrateguru Migrate Guru – Site Migration &amp; Cloning
• Denial of service

WordPress MalCare Security plugin <= 6.69 - Denial of Service Attack vulnerability

• MalCare Security
• Denial of service

Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption path

• MongoDB libmongocrypt
• Denial of service

NousResearch hermes-agent Electron Main Process main.ts resourceBufferFromUrl allocation of resources

• NousResearch hermes-agent
• Denial of service

Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Denial of service

Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal

• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Denial of service

Recursor kept querying cyclic glueless sibling delegations (no fixed hickory-recursor release)

• Denial of service

>=0.25.0-alpha.3 · no fixed version yet

Recursor followed every glueless name server in a referral, with no per-query budget

• Denial of service

>=0.26.0-beta.1, <0.26.2 · fixed in 0.26.2

2FastLabs agent-squad Streaming Agent Response Workflow orchestrator.ts AgentSquad.routeRequest resource consumption

• 2FastLabs agent-squad
• Denial of service

Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection

• Denial of service

<1.30.4 · fixed in 1.30.4

Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling

• Denial of service

<1.30.4 · fixed in 1.30.4

RightNow-AI OpenFang tool_runner.rs shell_exec memory allocation

• RightNow-AI OpenFang
• Denial of service

simular-ai Agent-S Model-generated GUI Action Execution Workflow grounding.py denial of service

• simular-ai Agent-S
• Denial of service

simular-ai Agent-S OCR HTTP API ocr_server.py ImageData resource consumption

• simular-ai Agent-S
• Denial of service

simular-ai Agent-S CodeAgent code_agent.py denial of service

• simular-ai Agent-S
• Denial of service

Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6

• Amazon ion-c
• Denial of service

sigoden aichat API Endpoint serve.rs memory allocation

• sigoden aichat
• Denial of service

rowboatlabs rowboat Composio Webhook Endpoint route.ts req.json denial of service

• rowboat
• Denial of service

Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

• Denial of service

<0.56.0 · fixed in 0.56.0

Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

• Denial of service

<0.56.0 · fixed in 0.56.0

Boruta: Authenticated atom-exhaustion DoS in BorutaIdentityWeb.UserSettingsController.update/2

• malach-it boruta-server
• Denial of service

Nexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata Fields

• Sonatype Nexus Repository 3
• Denial of service

ntegrals openbrowser Browser Agent Message Construction agent.ts resource consumption

• ntegrals openbrowser
• Denial of service