CVE-2025-4533

A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0. This vulnerability affects the function unzipFile of the file /jeecg-boot/airag/knowledge/doc/import/zip of the component Document Library Upload. The manipulation of the argument File leads to resource consumption. The...

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Uncontrolled resource consumption in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network...

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network...

Windows Deployment Services Denial of Service Vulnerability

Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally...

PT-2025-21100 · Intel · Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: Edge Orchestrator software for IntelR Tiber™ Edge Platform affected versions not specified Description: The issue concerns uncontrolled resource consumption, which may allow an authenticated user to potentially enable escalation of privilege...

Amazon Linux 2023 : libsoup, libsoup-devel (ALAS2023-2025-962)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-962 advisory. A flaw was found in libsoup, where the soupheadersparserequest function may be vulnerable to an out- of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to...

PT-2025-20961 · Microsoft · Windows Deployment Services +1

Name of the Vulnerable Software and Affected Versions: Windows Deployment Services affected versions not specified Description: The issue is related to uncontrolled resource consumption in Windows Deployment Services, allowing an unauthorized attacker to deny service locally. This is a...

Intel OpenVINO model server 资源管理错误漏洞

Intel OpenVINO model server is a high-performance AI model servitization platform based on the Intel OpenVINO tool suite from Intel Corporation USA. A resource management error vulnerability exists in Intel OpenVINO model server versions prior to 2024.4, which stems from insufficient control over...

PT-2025-21084 · Intel · Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: Edge Orchestrator software for IntelR Tiber™ Edge Platform affected versions not specified Description: The issue concerns uncontrolled resource consumption, which may allow an authenticated user to potentially enable denial of service via...

PT-2025-21114 · Intel · Openvino Model Server

Name of the Vulnerable Software and Affected Versions: OpenVINO model server software versions prior to 2024.4 Description: The issue allows an unauthenticated user to potentially enable denial of service via adjacent access due to uncontrolled resource consumption. Recommendations: For versions...

Amazon Linux 2023 : libsoup3, libsoup3-devel (ALAS2023-2025-961)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-961 advisory. A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times i...

PT-2025-20958 · Microsoft · Windows Ldap +1

Name of the Vulnerable Software and Affected Versions: Windows LDAP versions prior to the fixed version Description: The issue is related to uncontrolled resource consumption in the Lightweight Directory Access Protocol LDAP of Microsoft Windows operating systems. This can be exploited by a remot...

Important: libsoup

Issue Overview: A flaw was found in libsoup, where the soupheadersparserequest function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server. CVE-2025-32906 A flaw was found in libsoup. The implementation of...

Important: libsoup

Issue Overview: A flaw was found in libsoup, where the soupheadersparserequest function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server. CVE-2025-32906 A flaw was found in libsoup. The implementation of...

Amazon Linux 2 : libsoup (ALAS-2025-2849)

The version of libsoup installed on the remote host is prior to 2.56.0-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2849 advisory. A flaw was found in libsoup, where the soupheadersparserequest function may be vulnerable to an out- of-bound read. This...

Medium: javapackages-bootstrap

Issue Overview: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are...

ROS-2-609

2.609 Apache Ant utility vulnerability CVE-2021-36374, CVE-2021-36373 1. Vulnerability Description: CVE-2021-36374 A vulnerability in the Apache Ant utility, is related to the application improperly controlling internal resource consumption when processing ZIP archives. Exploitation of the...

PT-2025-21091 · Intel · Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: Edge Orchestrator software for IntelR Tiber Edge Platform affected versions not specified Description: The issue concerns uncontrolled resource consumption, which may allow an authenticated user to potentially enable denial of service via...

CVE-2025-47270 nimiq-network-libp2p Uncontrolled Resource Consumption vulnerability

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. The nimiq-network-libp2p subcrate of nimiq/core-rs-albatross is vulnerable to a Denial of Service DoS attack due to uncontrolled memory allocation. Specifically, the...

CVE-2025-46392

A flaw was found in the Apache Commons Configuration. This vulnerability allows uncontrolled resource consumption via loading untrusted configuration files or attacker-controlled usage patterns. Mitigation Mitigation for this issue is either not available or the currently available options do not...