Advisories · Weakness
Denial of service.
Crashes, hangs and resource exhaustion, ReDoS included. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 8.2 High
Superlinear base62 decoding exhausts CPU and memory in AshAuthentication API key sign-in
- Denial of service
>=4.8.0, <4.15.0 || >=5.0.0-rc.0, <5.0.0-rc.14 · fixed in 4.15.0, 5.0.0-rc.14
GHSA-q876-xr24-2mcx · CVE-2026-82760 - CVSS 6.9 Medium
WWBN AVideo userVerifyEmail.php Unauthenticated Access Control
- WWBN AVideo
- Denial of service
- CVSS 7.4 High
Allocation of Resources Without Limits or Throttling in OOBM
- Qualcomm, Inc. Snapdragon
- Denial of service
- CVSS 7.5 High
Duplicate Advisory: joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`
- Denial of service
>=18.0.0 · no fixed version yet
GHSA-mrx9-2rrp-rhpx - CVSS 7.5 High
RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service
- Denial of service
<2.0.0 · fixed in 2.0.0
GHSA-9pj6-vhgr-3mwh · CVE-2026-63128 - CVSS 6.5 Medium
vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions
- Denial of service
<0.24.0 · fixed in 0.24.0
GHSA-hcwq-8wjf-3gcr · CVE-2026-57173 - CVSS 8.6 High
Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Service
- Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- Cisco Secure Firewall Threat Defense (FTD) Software
- Denial of service
- CVSS 7.4 High
Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability
- Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- Cisco Secure Firewall Threat Defense (FTD) Software
- Denial of service
- CVSS 8.6 High
Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Memory Exhaustion Denial of Service Vulnerability
- Cisco Secure Firewall Management Center (FMC)
- Cisco Secure Firewall Threat Defense (FTD) Software
- Denial of service
- CVSS 8.6 High
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS Denial of Service Vulnerability
- Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- Cisco Secure Firewall Threat Defense (FTD) Software
- Denial of service
- CVSS 7.5 High
Apache MyFaces: Denial of Service via Unbounded Request Parsing
- Apache Software Foundation Apache MyFaces
- Denial of service
- CVSS 7.5 High
Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlock
- OISF suricata
- Denial of service
- CVSS 7.1 High
Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereference
- Open5GS
- Denial of service
- Memory corruption
- CVSS 5.3 Medium
Open5GS PFCP Session Report Request n4-handler.c smf_n4_handle_session_report_request assertion
- Open5GS
- Denial of service
- CVSS 5.3 Medium
Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereference
- Artifex MuPDF
- Denial of service
- Memory corruption
- CVSS 7.0 High
node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion
- Denial of service
>=2.0.0, <2.170.0 · fixed in 2.170.0
GHSA-r2pf-9cw4-5j65 · CVE-2026-68904 - CVSS 7.5 High
Keycloak-services: keycloak-services: unauthenticated dos via unbounded locale caching
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.16
- Denial of service
- CVSS 7.5 High
Keycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib state
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.16
- Denial of service
- CVSS 8.2 High
RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking
- rabbitmq amqp091-go
- Denial of service
- CVSS 5.3 Medium
Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching
- ISC BIND 9
- Denial of service
- CVSS 7.5 High
Validating resolver can abort while caching a mismatched NOQNAME proof
- ISC BIND 9
- Denial of service
- CVSS 7.5 High
named aborts on a TKEY query when the user configuration has no global options statement
- ISC BIND 9
- Denial of service
- CVSS 5.3 Medium
vllm-project vllm thinking_budget_state.py algorithmic complexity
- vllm
- Denial of service
- CVSS 7.5 High
SVCB AliasMode additional-data error leaks qpcache references
- ISC BIND 9
- Denial of service
- CVSS 5.3 Medium
ag-ui-protocol ag-ui JSON sse_parser.cpp resource consumption
- ag-ui
- Denial of service
- CVSS 6.9 Medium
ag-ui-protocol ag-ui SSE Frame sse.rs resource consumption
- ag-ui
- Denial of service
- CVSS 7.1 High
Uncontrolled resource consumption in Advantech EKI-1242IEIMS and others
- Advantech EKI-1242IEIMS
- Advantech EKI-1242EIMS
- Denial of service
- CVSS 5.3 Medium
ag-ui-protocol ag-ui SSE Client client.go resource consumption
- ag-ui
- Denial of service
- CVSS 5.3 Medium
a2ui-project a2ui Update Components basic_functions.ts updateComponents resource consumption
- a2ui
- Denial of service
- CVSS 7.0 High
Security Advisory 0172
- Arista Networks EOS
- Denial of service
- CVSS 5.3 Medium
Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC
- NLnet Labs Unbound
- Denial of service
- CVSS 5.3 Medium
Possible degradation of service from continuous queries on the same TCP/DoT connection
- NLnet Labs Unbound
- Denial of service
- CVSS 5.9 Medium
Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Denial of service
- CVSS 7.1 High
Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt
- qt
- Denial of service
- CVSS 7.5 High
Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
- CVSS 7.5 High
Allocation of Resources Without Limits or Throttling in GitLab
- GitLab
- Denial of service
- CVSS 5.7 Medium
Seraphinite Accelerator < 2.29.24 - Subscriber+ DoS via seraph_accel_State Update
- Seraphinite Accelerator
- Denial of service
- CVSS 6.9 Medium
vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumption
- vLLM
- Denial of service
- CVSS 6.9 Medium
a2ui-project a2ui Basic Catalog safe_regex.ts redos
- a2ui
- Denial of service
- CVSS 7.5 High
emp3r0r has an unauthenticated HTTP Polling DoS
- Denial of service
<0.0.0-20260531142011-aed3d81641ab · fixed in 0.0.0-20260531142011-aed3d81641ab
GHSA-4595-rvpx-4q34 · CVE-2026-61554 - CVSS 7.5 High
Uncontrolled resource consumption in Oracle Corporation Helidon
- Oracle Corporation Helidon
- Denial of service
- CVSS 6.0 Medium
Uncontrolled resource consumption in Oracle Corporation Oracle VM VirtualBox
- Oracle Corporation Oracle VM VirtualBox
- Denial of service
- CVSS 6.0 Medium
Uncontrolled resource consumption in Oracle Corporation Oracle VM VirtualBox
- Oracle Corporation Oracle VM VirtualBox
- Denial of service
- CVSS 6.0 Medium
Uncontrolled resource consumption in Oracle Corporation Oracle VM VirtualBox
- Oracle Corporation Oracle VM VirtualBox
- Denial of service
- CVSS 6.1 Medium
Uncontrolled resource consumption in Oracle Corporation Oracle VM VirtualBox
- Oracle Corporation Oracle VM VirtualBox
- Denial of service
- CVSS 7.5 High
Uncontrolled resource consumption in Oracle Corporation Oracle VM VirtualBox
- Oracle Corporation Oracle VM VirtualBox
- Denial of service
- CVSS 4.4 Medium
Uncontrolled resource consumption in Oracle Corporation Oracle VM VirtualBox
- Oracle Corporation Oracle VM VirtualBox
- Denial of service
- CVSS 5.3 Medium
Uncontrolled resource consumption in Oracle Corporation Oracle VM VirtualBox
- Oracle Corporation Oracle VM VirtualBox
- Denial of service
- CVSS 7.5 High
Uncontrolled resource consumption in Oracle Corporation Oracle Hyperion Financial Management
- Oracle Corporation Oracle Hyperion Financial Management
- Denial of service
- CVSS 7.5 High
Uncontrolled resource consumption in Oracle Corporation Oracle Hyperion Financial Management
- Oracle Corporation Oracle Hyperion Financial Management
- Denial of service
- CVSS 7.5 High
Uncontrolled resource consumption in Oracle Corporation Oracle Hyperion Financial Management
- Oracle Corporation Oracle Hyperion Financial Management
- Denial of service
- CVSS 7.5 High
Uncontrolled resource consumption in Oracle Corporation Oracle Hyperion Data Relationship Management
- Oracle Corporation Oracle Hyperion Data Relationship Management
- Denial of service
- CVSS 7.5 High
Uncontrolled resource consumption in Oracle Corporation Oracle Hyperion Data Relationship Management
- Oracle Corporation Oracle Hyperion Data Relationship Management
- Denial of service
- CVSS 7.1 High
Uncontrolled resource consumption in Oracle Corporation Oracle Report Manager
- Oracle Corporation Oracle Report Manager
- Denial of service
- CVSS 5.3 Medium
Uncontrolled resource consumption in Oracle Corporation Helidon
- Oracle Corporation Helidon
- Denial of service
- CVSS 8.2 High
Uncontrolled resource consumption in Oracle Corporation Oracle Mobile Application Server
- Oracle Corporation Oracle Mobile Application Server
- Denial of service
- CVSS 5.3 Medium
Uncontrolled resource consumption in Oracle Corporation Helidon
- Oracle Corporation Helidon
- Denial of service
- CVSS 5.3 Medium
Uncontrolled resource consumption in Oracle Corporation Helidon
- Oracle Corporation Helidon
- Denial of service
- CVSS 8.1 High
Uncontrolled resource consumption in Oracle Corporation Oracle Demand Signal Repository
- Oracle Corporation Oracle Demand Signal Repository
- Denial of service
- CVSS 7.1 High
Uncontrolled resource consumption in Oracle Corporation Oracle Depot Repair
- Oracle Corporation Oracle Depot Repair
- Denial of service