Uncontrolled Resource Consumption

jackson-databind is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to the deserialization of arbitrarily long numeric components in XML datatype strings without length validation, which allows an unauthenticated attacker to submit specially crafted JSON values that caus...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

EUVD-2026-88048

A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource...

ROS-20260928-73-0077

The vulnerability of the tcfconnmarkdump function in the net/sched/actconnmark.c module of the net/sched/actconnmark subsystem of the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to access protected information or...

ROS-20260928-73-0114

The vulnerability of the hfsplusiget function in the fs/hfsplus/super.c module, which supports the Apple HFS extended file system, is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0025

The vulnerability of the bpfredirectneigh function in the Linux operating system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0120

The vulnerability of the fpuclearuserstates function in the arch/x86/kernel/fpu/core.c module of the Linux operating system’s x86 kernel support module is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0066

The vulnerability of the nvmefcdeleteassociation function in the drivers/nvme/host/fc.c file of the NVMe over Fibre Channel driver for the Linux operating system is related to multiple releases of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to cause a...

ROS-20260928-73-0130

The vulnerability of the drivers/pmdomain/arm/scmipmdomain.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260928-73-0125

The vulnerability of the udptunnelnicnetdeviceevent function in the net/ipv4/udptunnelnic.c module of the Linux kernel’s IPv4 protocol implementation is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to...

ROS-20260928-73-0037

The vulnerability of the Linux operating system’s kernel media component is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

ROS-20260928-73-0129

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0023

The vulnerability of the usbnetresumerx function in the drivers/net/usb/usbnet.c module of the Linux kernel is related to resource management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

MinIO DoS

The vulnerability of the MinIO object storage server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Netty Resource Limit DoS

The vulnerability of the framework for developing network applications, servers, and client protocols using Netty is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Netty SslClientHelloHandler Buffer Overflow DoS

The vulnerability of the SslClientHelloHandler.decode function in the framework for developing network applications, servers, and clients using the Netty protocol is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Netty DefaultHttp2Connection DefaultEndpoint DoS

The vulnerability of the DefaultHttp2Connection.DefaultEndpoint component in the framework for developing network applications, servers, and client protocols using Netty is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service...

pyasn1 Uncontrolled Resource Consumption DoS

The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

RedisArrayAggregator DoS

The vulnerability of the RedisArrayAggregator component in the networking application development framework, used for servers and client protocols based on Netty, involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruption...