295 matches found
pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values
A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption,...
Security Bulletin: Vulnerability in BIND (CVE-2026-1519) affects AIX/ VIOS.
Summary When a BIND 9 resolver performs DNSSEC validation on a maliciously crafted DNS zone, an attacker can trigger excessive NSEC3 iterations during insecure delegation validation. This causes the named process to consume excessive CPU resources, potentially making the resolver unavailable...
CVE-2026-64641 Next.js: Denial of Service in App Router using Server Actions
Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive CPU usage blocking processing of further...
CVE-2026-64641
Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive CPU usage blocking processing of further...
CVE-2026-13064 MongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service
Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in affected MongoDB deployments, potentially leading to resource exhaustion. The resulting CPU-bound operation cannot be interrupted through standard administrative controls...
gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification
A flaw was found in GnuTLS. This vulnerability allows a denial of service DoS by excessive CPU Central Processing Unit and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names SANs...
golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip
A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A ...
EulerOS Virtualization 2.13.0 : bind (EulerOS-SA-2026-2395)
According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU...
CLEANSTART-2026-IT61881 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU
Security vulnerability affects the kube-state-metrics package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...
CVE-2026-3276
unicodedata.normalize can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This affects all normalization forms...
AZL-89360 CVE-2026-42504 affecting package golang for versions less than 1.25.11-1
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...
AZL-87242 CVE-2026-25680 affecting package cri-o 1.30.1-1
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87963 CVE-2026-25680 affecting package kubevirt for versions less than 1.7.1-7
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87414 CVE-2026-25680 affecting package cert-manager for versions less than 1.12.15-9
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87498 CVE-2026-25680 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87813 CVE-2026-25680 affecting package influxdb for versions less than 2.7.5-17
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-87513 CVE-2026-25680 affecting package cni-plugins for versions less than 1.4.0-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
AZL-88230 CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...