BIT-DOTNET-SDK-2026-96960 .NET Denial of Service Vulnerability

Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...

BIT-DOTNET-2026-96960 .NET Denial of Service Vulnerability

Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...

Asymmetric Resource Consumption

Overview Affected versions of this package are vulnerable to Asymmetric Resource Consumption in the EnvelopedCms.Decode method, which performs quadratic work while processing the attributes of a CMS or PKCS7 message. An attacker can exhaust CPU on the host before any authentication step by...

CVE-2026-96960

Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-96960

Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-96960

Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...

.NET Denial of Service Vulnerability

Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-104817: Asymmetric Resource Consumption (Amplification)

Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss API lacks rate limiting and response-size restrictions and performs synchronous XML parsing. An attacker can trigger unbounded outbound HTTP requests and synchronous parsing,...

Microsoft .NET Framework: CVE-2026-96960: .NET Denial of Service Vulnerability

Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...

Linux Distros Unpatched Vulnerability : CVE-2026-104712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal...

CVE-2026-104712

Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal java.math.BigDecimal property that is then rendered through the Struts tag library, the framework can produce a response many orders of magnitude large...

CVE-2026-104712 Apache Struts: Disproportionate response size when rendering BigDecimal request parameters

Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal java.math.BigDecimal property that is then rendered through the Struts tag library, the framework can produce a response many orders of magnitude large...

CVE-2026-104712

Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal java.math.BigDecimal property that is then rendered through the Struts tag library, the framework can produce a response many orders of magnitude large...

Linux Distros Unpatched Vulnerability : CVE-2026-103885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core...

Linux Distros Unpatched Vulnerability : CVE-2026-103880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP...

EUVD-2026-91434

Zebra zebrad before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee...

CVE-2026-103880

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP server that supports this algorithm will cause the server CPU to run for hours checking the credentials. A bounded cost should be enforced...

DEBIAN-CVE-2026-103885

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

CVE-2026-103885

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

DEBIAN-CVE-2026-103880

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP server that supports this algorithm will cause the server CPU to run for hours checking the credentials. A bounded cost should be enforced...