Denial of service.

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via thenteraction between traj_server, poscm…

• Denial of service

rclone: S3 multipart declared-length memory exhaustion

• Denial of service

>=1.75.0, <1.75.1 · fixed in 1.75.1

Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout

• Denial of service
• CWE-405

>=0.9.0, <0.11.1 · fixed in 0.11.1

Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle

• Denial of service

>=0.10.0, <0.11.1 · fixed in 0.11.1

mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS

• Denial of service

<0.8.18 · fixed in 0.8.18

ikev2: unbounded client transform storage can lead to resource exhaustion

• OISF suricata
• Denial of service

Suricata ldap: unbounded responses per transaction can lead to resource exhaustion

• OISF suricata
• Denial of service

Suricata nfs: unbounded stateful structures can lead to resource exhaustion

• OISF suricata
• Denial of service

Suricata dnp3: unbounded reassembly can lead to resource exhaustion

• OISF suricata
• Denial of service

Suricata http1: quadratic Content-Disposition processing can lead to denial of service

• OISF suricata
• Denial of service

Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded

• Denial of service

>=2.8.2, <2.11.56 · fixed in 2.11.56

Consul vulnerable to a denial of service in the native RPC listener

• HashiCorp Consul
• HashiCorp Consul Enterprise
• Denial of service

IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

• IBM WebSphere Application Server
• Denial of service

zstd-jni 1.4.8-4 through 1.5.7-13 Denial of Service via Negative Length

• luben zstd-jni
• Denial of service

CP210x Denial of Service

• Silicon Labs silabser.sys driver
• Denial of service

n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path

• Denial of service

<1.123.76 || >=2.0.0, <2.37.7 || >=2.38.0, <2.38.2 · fixed in 1.123.76, 2.37.7, 2.38.2

n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint

• Denial of service

<2.37.7 || >=2.38.0, <2.38.2 · fixed in 2.37.7, 2.38.2

Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation

• Denial of service

<=1.4.0 · no fixed version yet

ION-DTN < 4.2.1-a.1 Denial of Service via canonicalizePayloadBlock() Assertion

• nasa-jpl ION-DTN
• Denial of service

Suricata lua: sandbox allocation limit not enforced for new allocations

• OISF suricata
• Denial of service

GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion

• GeoVision Inc. GV-LPC2011/LPC2211
• Denial of service

GV-LPC2011/LPC2211 - PTZ Connection-State Accept-Loop Denial of Service

• GeoVision Inc. GV-LPC2011/LPC2211
• Denial of service

Skupper-router: skupper-router: unbounded recursion in amqp field parser leads to denial of service

• Red Hat Service Interconnect 2 for RHEL 8
• Red Hat Service Interconnect 2 for RHEL 9
• Denial of service

Apache Artemis, Apache ActiveMQ Artemis: Message selector wildcard handling could lead to denial of service

• Apache Software Foundation Apache Artemis
• Apache Software Foundation Apache ActiveMQ Artemis
• Denial of service

An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the checkCollisionCallback, execFSMCallback, planFrom…

• Denial of service

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the EGOReplanFSM component

• Denial of service

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the EGOReplanFSM::checkCollisionCallback…

• Denial of service

Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree

• Denial of service

>=0.10.0, <0.11.1 · fixed in 0.11.1

Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

• Denial of service

>=0.5.0, <0.11.1 · fixed in 0.11.1

Unauthenticated Network-Based Denial of Service in CPPM systems

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• Denial of service

smol-toml: Denial of Service via malformed TOML documents

• Denial of service
• CWE-606

<1.7.1 · fixed in 1.7.1

containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service

• Denial of service

<1.7.35 · fixed in 1.7.35

Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)

• eProsima Fast-DDS
• Denial of service

Uncontrolled Memory Allocation in cel-go

• Google cel-go
• Denial of service

t-digest 3.1 through 3.3 Denial of Service via NaN Centroid Means in MergingDigest.fromBytes

• tdunning t-digest
• Denial of service

Duplicate Advisory: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit author/committer field parsing

• Denial of service

<=3.1.59 · no fixed version yet

Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)

• Apache Software Foundation Apache Nutch
• Denial of service
• Broken access control

KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size

• KeePass
• Denial of service

A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via a crafted MPD Seg…

• Denial of service

An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via the function gf_route_media_complete_object().

• Denial of service

Denial of Service via Unbounded Recursion in go-attestation Windows SIPA Parser

• Google go-attestation
• Denial of service

MCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS)

• io.modelcontextprotocol:kotlin-sdk
• io.modelcontextprotocol:kotlin-sdk-client
• Denial of service

Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address list

• Denial of service

<9.1.0 · fixed in 9.1.0

multer vulnerable to Denial of Service via file descriptor leak on aborted uploads

• Denial of service
• CWE-459

>=2.2.0, <2.3.0 · fixed in 2.3.0

multer vulnerable to Denial of Service via oversized array index in field names

• Denial of service

<2.3.0 · fixed in 2.3.0

js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources

• Denial of service

>=3.0.0, <3.15.2 || >=4.0.0, <4.3.2 · fixed in 3.15.2, 4.3.2

Tiptap: Quadratic ReDoS in block and inline Markdown attribute parsing

• Denial of service

>=3.7.0, <3.30.5 · fixed in 3.30.5

Hono: Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion

• Denial of service

<4.13.5 · fixed in 4.13.5

xmldom: Quadratic-time attribute deduplication

• Denial of service

<=0.6.0 · no fixed version yet

xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser

• Denial of service

>=0.7.0, <0.8.15 · fixed in 0.8.15

xmldom: Quadratic-memory consumption

• Denial of service

>=0.1.5, <=0.6.0 · no fixed version yet

xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge

• Denial of service

>=0.3.0, <=0.6.0 · no fixed version yet

xmldom: HTML raw-text closing-tag case mismatch causes output amplification

• Denial of service
• CWE-178

>=0.9.0-beta.1, <0.9.12 · fixed in 0.9.12

Colord: Slow rejection of oversized malformed color strings

• Denial of service

<2.9.4 · fixed in 2.9.4

HTTPX2: Quadratic SSE line buffering can cause CPU denial of service

• Denial of service

>=2.5.0, <2.10.0 · fixed in 2.10.0

xmldom PI grammar regex ReDoS: quadratic backtracking on unterminated processing instructions

• Denial of service

>=0.9.0-beta.9, <0.9.11 · fixed in 0.9.11

Acrobat Reader | Uncontrolled Resource Consumption (CWE-400)

• Adobe Acrobat
• Adobe Acrobat Reader
• Denial of service

NLTK: Pl196xCorpusReader has quadratic ReDoS on malformed TEI blocks

• Denial of service

<3.10.3 · fixed in 3.10.3

NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions

• Denial of service

<3.10.3 · fixed in 3.10.3

NLTK: ReDoS in nltk.text.Text.findall() via unvalidated user-supplied regular expressions

• Denial of service

<3.10.0 · fixed in 3.10.0