CVE-2025-20057

Uncontrolled resource consumption for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2025-29954

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network...

CVE-2025-29957

Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally...

CVE-2025-26677

Uncontrolled resource consumption in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network...

golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh

A flaw was found in the golang.org/x/crypto/ssh package. SSH clients and servers are vulnerable to increased resource consumption, possibly leading to memory exhaustion and a DoS. This can occur during key exchange when the other party is slow to respond during key exchange...

CVE-2025-4533

A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0. This vulnerability affects the function unzipFile of the file /jeecg-boot/airag/knowledge/doc/import/zip of the component Document Library Upload. The manipulation of the argument File leads to resource consumption. The...

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Uncontrolled resource consumption in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network...

Windows Deployment Services Denial of Service Vulnerability

Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally...

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network...

PT-2025-20961 · Microsoft · Windows Deployment Services +1

Name of the Vulnerable Software and Affected Versions: Windows Deployment Services affected versions not specified Description: The issue is related to uncontrolled resource consumption in Windows Deployment Services, allowing an unauthorized attacker to deny service locally. This is a...

PT-2025-21100 · Intel · Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: Edge Orchestrator software for IntelR Tiber™ Edge Platform affected versions not specified Description: The issue concerns uncontrolled resource consumption, which may allow an authenticated user to potentially enable escalation of privilege...

Amazon Linux 2023 : libsoup, libsoup-devel (ALAS2023-2025-962)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-962 advisory. A flaw was found in libsoup, where the soupheadersparserequest function may be vulnerable to an out- of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to...

PT-2025-20958 · Microsoft · Windows Ldap +1

Name of the Vulnerable Software and Affected Versions: Windows LDAP versions prior to the fixed version Description: The issue is related to uncontrolled resource consumption in the Lightweight Directory Access Protocol LDAP of Microsoft Windows operating systems. This can be exploited by a remot...

PT-2025-21114 · Intel · Openvino Model Server

Name of the Vulnerable Software and Affected Versions: OpenVINO model server software versions prior to 2024.4 Description: The issue allows an unauthenticated user to potentially enable denial of service via adjacent access due to uncontrolled resource consumption. Recommendations: For versions...

Intel OpenVINO model server 资源管理错误漏洞

Intel OpenVINO model server is a high-performance AI model servitization platform based on the Intel OpenVINO tool suite from Intel Corporation USA. A resource management error vulnerability exists in Intel OpenVINO model server versions prior to 2024.4, which stems from insufficient control over...

PT-2025-21084 · Intel · Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: Edge Orchestrator software for IntelR Tiber™ Edge Platform affected versions not specified Description: The issue concerns uncontrolled resource consumption, which may allow an authenticated user to potentially enable denial of service via...

Medium: javapackages-bootstrap

Issue Overview: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are...

Important: libsoup

Issue Overview: A flaw was found in libsoup, where the soupheadersparserequest function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server. CVE-2025-32906 A flaw was found in libsoup. The implementation of...

Important: libsoup

Issue Overview: A flaw was found in libsoup, where the soupheadersparserequest function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server. CVE-2025-32906 A flaw was found in libsoup. The implementation of...

Amazon Linux 2 : libsoup (ALAS-2025-2849)

The version of libsoup installed on the remote host is prior to 2.56.0-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2849 advisory. A flaw was found in libsoup, where the soupheadersparserequest function may be vulnerable to an out- of-bound read. This...