2 matches found
CVE-2026-81520: Synchronous Access of Remote Resource without Timeout
A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session open indefinitely by beginning a SASL-based login exchange and then declining to complete it. Because the negotiation loop had no overall time bound and the read from the client ha...
F5 Networks BIG-IP : Slowloris denial-of-service attack vulnerability (K12636)
The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service daemon outage via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the modreqtimeout module in versions before 2.2.15. CVE-2007-6750 Impact The Slowloris attack is a type of...