ROS-20240828-04

A vulnerability in OpenVPN software is related to the lack of uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Denial Of Service (DOS)

github.com/mattermost/mattermost-plugin-channel-export is vulnerable to Denial Of Service DOS. The vulnerability is caused due to a failure to restrict concurrent runs of the /export command. The can allow an attacker to consume excessive resource by running the /export command multiple times at...

CVE-2024-41996

Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers from the client side to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource...

CVE-2024-41996

Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers from the client side to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource...

CVE-2024-41996

Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers from the client side to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource...

ROS-20240826-19

Vulnerability in Wheel Python Packaging Authority package installation tools is related to uncontrolled resource consumption. resource consumption. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

CVE-2024-41996

Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers from the client side to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource...

Mattermost Plugin Channel Export excessive resource consumption

Mattermost Plugin Channel Export versions =1.0.0 fail to restrict concurrent runs of the /export command which allows a user to consume excessive resource by running the /export command multiple times at once...

GHSA-869F-PX86-VJ84 Mattermost Plugin Channel Export excessive resource consumption

Mattermost Plugin Channel Export versions =1.0.0 fail to restrict concurrent runs of the /export command which allows a user to consume excessive resource by running the /export command multiple times at once...

CVE-2024-43105 Excessive Resource Consumption via `/export`

Mattermost Plugin Channel Export versions =1.0.0 fail to restrict concurrent runs of the /export command which allows a user to consume excessive resource by running the /export command multiple times at once...

CVE-2024-43105 Excessive Resource Consumption via `/export`

Mattermost Plugin Channel Export versions =1.0.0 fail to restrict concurrent runs of the /export command which allows a user to consume excessive resource by running the /export command multiple times at once...

CVE-2024-8041

CVE-2024-8041 describes a Denial of Service in GitLab CE/EE. A DoS can occur when importing a maliciously crafted repository via the GitHub importer, affecting all versions before 17.1.6, 17.2 before 17.2.4, and 17.3 before 17.3.1. The impact is an availability impact (A:H) with no confidentialit...

CVE-2024-8041 Uncontrolled Resource Consumption in GitLab

A Denial of Service DoS issue has been discovered in GitLab CE/EE affecting all versions prior to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1. A denial of service could occur upon importing a maliciously crafted repository using the GitHub importer...

CVE-2024-45163

The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC command and control server. Unauthenticated sessions remain open, causing resource consumption. For example, an attacker can send a recognized username such as root, or can send arbitrary data...

CVE-2024-45163

The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC command and control server. Unauthenticated sessions remain open, causing resource consumption. For example, an attacker can send a recognized username such as root, or can send arbitrary data...

Huawei EulerOS: Security Advisory for mdadm (EulerOS-SA-2024-2283)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-45163

The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC command and control server. Unauthenticated sessions remain open, causing resource consumption. For example, an attacker can send a recognized username such as root, or can send arbitrary data...

CVE-2024-45163

CVE-2024-45163 concerns the Mirai botnet codebase where simultaneous TCP connections to the CNC server are mishandled, leaving unauthenticated sessions open and allowing resource consumption. Affected: Mirai botnet (through 2024-08-19) with unauthenticated sessions that can be triggered by sendin...

GO-2022-0919 Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings in github.com/pterodactyl/wings

Asymmetric Resource Consumption Amplification in Docker containers created by Wings in github.com/pterodactyl/wings...

PT-2024-31446

Name of the Vulnerable Software and Affected Versions Mirai botnet versions prior to 2024-08-19 Description The Mirai botnet through 2024-08-19 exhibits improper handling of simultaneous TCP connections to the command and control CNC server. This allows unauthenticated sessions to remain open,...