Denial of service.

Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability

• Cisco Session Initiation Protocol (SIP) Software
• Denial of service

SQL Data Source Plugin: OOM DoS via $__timeGroup macro

• Grafana PostgreSQL Datasource
• Grafana MySQL Datasource
• Denial of service

Mistune: Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown

• Denial of service

>=3.3.0, <3.3.3 · fixed in 3.3.3

Grav: Authenticated ReDoS via regex_replace in Twig Sandbox

• Denial of service

<2.0.4 · fixed in 2.0.4

qs array-limit bypass via bracket-key comma parsing

• Denial of service

>=6.14.2, <6.16.0 · fixed in 6.16.0

Allocation of Resources Without Limits or Throttling in Filebeat Leading to Denial of Service

• Elastic Filebeat
• Denial of service

Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

• Elastic Kibana
• Denial of service

Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop

• Denial of service
• CWE-1284

<6.5.8 · fixed in 6.5.8

pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace

• Denial of service

<6.15.0 · fixed in 6.15.0

NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y'

• Denial of service

<3.10.3 · fixed in 3.10.3

NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`

• Denial of service

<3.10.3 · fixed in 3.10.3

NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars

• Denial of service

<3.10.3 · fixed in 3.10.3

NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input

• Denial of service

<3.10.3 · fixed in 3.10.3

IFC File Parsing Uncontrolled Recursion in Certain Autodesk Products

• Autodesk Shared Components
• Autodesk Revit
• Denial of service

ImageMagick: Memory Leak when providing invalid options to the cli

• Denial of service

<14.15.0 · fixed in 14.15.0

WordPress WP Go Maps plugin <= 10.1.08 - Denial of Service Attack vulnerability

• WPGMaps WP Go Maps
• Denial of service

WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability

• Really Simple Plugins Really Simple SSL
• Denial of service

Server-side request forgery in Eclipse Foundation Eclipse Ditto

• Eclipse Foundation Eclipse Ditto
• Denial of service
• Server-side request forgery (SSRF)

FIPS mode assertion failure via malicious CERT payload

• libreswan
• Denial of service
• CWE-252

zhayujie CowAgent Bash Tool bash.py denial of service

• zhayujie CowAgent
• Denial of service

zhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of service

• zhayujie CowAgent
• Denial of service

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record

• Denial of service

NousResearch hermes-agent MCP Tool mcp_tool.py list_tools memory allocation

• NousResearch hermes-agent
• Denial of service

Allowed UNC hostnames for attachments interpreted as a regular expression

• Mozilla Thunderbird
• Denial of service

gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation

• Denial of service

<1.83.1 · fixed in 1.83.1

pypdf: Possible long runtimes/large memory usage when retrieving outlines

• Denial of service
• CWE-405

<6.16.1 · fixed in 6.16.1

pypdf: Possible long runtimes/large memory usage when extracting XForm objects

• Denial of service

<6.16.1 · fixed in 6.16.1

pypdf: Possible infinite loop for TreeObject.insert_child

• Denial of service

<6.16.0 · fixed in 6.16.0

sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption

• Denial of service

<0.6.0 · fixed in 0.6.0

NousResearch hermes-agent ACP Prompt Workflow session.py HermesACPAgent.prompt denial of service

• NousResearch hermes-agent
• Denial of service

NousResearch hermes-agent Session Chat api_server.py denial of service

• NousResearch hermes-agent
• Denial of service

Unauthenticated Denial-of-Service (DoS) Vulnerability in AOS-CX

• Hewlett Packard Enterprise (HPE) AOS-CX
• Denial of service

league/commonmark: Denial of service via distinctly-named attributes in the Attributes extension

• Denial of service
• CWE-1050

>=1.5.0, <2.10.0 · fixed in 2.10.0

Unauthenticated Denial-of-Service Vulnerabilities in AOS-CX

• Hewlett Packard Enterprise (HPE) AOS-CX
• Denial of service

Authenticated Denial-of-Service Vulnerabilities in the Command Line Interface of AOS-CX

• Hewlett Packard Enterprise (HPE) AOS-CX
• Denial of service

league/commonmark: Denial of service in the SmartPunct and Attributes extensions

• Denial of service
• CWE-1050

>=1.5.0, <2.9.1 · fixed in 2.9.1

league/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimiters

• Denial of service
• CWE-1050

>=0.6.0, <2.9.1 · fixed in 2.9.1

tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)

• Denial of service

<6.5.8 · fixed in 6.5.8

Authenticated Denial of Service Vulnerability in HPE Networking Fabric Composer API

• Hewlett Packard Enterprise (HPE) Fabric Composer
• Denial of service

Authenticated Denial of Service Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface

• Hewlett Packard Enterprise (HPE) Fabric Composer
• Denial of service

Authenticated Denial of Service Vulnerabilities in HPE Networking Fabric Composer API

• Hewlett Packard Enterprise (HPE) Fabric Composer
• Denial of service

Unauthenticated Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer

• Hewlett Packard Enterprise (HPE) Fabric Composer
• Denial of service

Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`

• Denial of service

<3.17.2 · fixed in 3.17.2

Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

• Elastic Kibana
• Denial of service

Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

• Elastic Kibana
• Denial of service

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

• Elasticsearch
• Denial of service

Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

• Elastic Kibana
• Denial of service

Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM

• Denial of service

<4.28.7 · fixed in 4.28.7

Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints

• Red Hat OpenShift Container Platform 4.13
• Red Hat OpenShift Container Platform 4.14
• Denial of service

httpd parks a request worker indefinitely on a malformed chunk size sent after the headers

• Erlang OTP
• Denial of service

inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception

• Erlang OTP
• Denial of service

httpc memory exhaustion via unbounded response header accumulation

• Erlang OTP
• Denial of service

httpd applies no timeout while receiving a request body, parking a worker on a stalled client

• Erlang OTP
• Denial of service

httpd does not enforce the documented default max_clients connection limit

• Erlang OTP
• Denial of service

Resource allocation without limits in Schneider Electric EcoStruxure™ OPC UA Server Expert and others

• Schneider Electric EcoStruxure™ OPC UA Server Expert
• Schneider Electric EcoStruxure™ Modicon Communication Server
• Denial of service

Rockwell Automation 1756-ENBT Denial of Service Vulnerability

• Rockwell Automation 1756-ENBT Module
• Denial of service

Rockwell Automation ArmorStart® LT Denial Of Service

• Rockwell Automation ArmorStart® LT
• Denial of service

Denial-of-service in the PDF Viewer component

• Mozilla Firefox
• Mozilla Thunderbird
• Denial of service

Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads

• Denial of service

>=2.19.0, <3.32.2 · fixed in 3.32.2

Ash.Filter.Runtime materializes a combinatorial cross-product over to-many relationships, exhausting memory

• Denial of service

>=1.29.0-rc0, <3.32.2 · fixed in 3.32.2