CVE-2024-12401

A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large amounts of CPU in the cert-manager controller pod to effectively create a denial-of-service DoS vector for the cert-manag...

CVE-2024-1975

CVE-2024-1975 describes a denial-of-service in ISC BIND where a client can exhaust resolver CPU by sending a flood of SIG(0) signed requests if a zone contains a KEY RR or DNSSEC validation occurs from cache. Affected are BIND 9.x builds listed in the CVE description (notably older 9.x releases u...

Authentication flaw

A improper restriction of excessive authentication attempts vulnerability CWE-307 in Fortinet FortiAuthenticator 6.4.x and before allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form...

CVE-2018-20030

An error when processing the EXIFIFDINTEROPERABILITY and EXIFIFDEXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources...