CVE-2024-43545 is a denial of service vulnerability in the Windows Online Certificate Status Protocol (OCSP) Server affecting multiple versions of Microsoft Windows Server 2008 Service Pack 2 and later. It involves uncontrolled resource consumption that can cause service disruption. The vulnerability has a high severity score of 7.5 and has been officially fixed by Microsoft in specific updates.
CVE-2024-43544 is a denial of service vulnerability in the Microsoft Simple Certificate Enrollment Protocol affecting multiple versions of Windows Server 2008 Service Pack 2 and later Windows versions. It involves uncontrolled resource consumption that can cause service disruption. The vulnerability has a high severity rating with a CVSS score of 7.5. Microsoft has released official patches to address this issue.
CVE-2024-38149 is a high-severity denial of service vulnerability affecting Microsoft Windows 10 Version 1507 and related versions. It involves uncontrolled resource consumption in the BranchCache feature, which can cause system availability disruption. The vulnerability has been officially fixed in multiple Windows 10 builds as per Microsoft's advisory.
CVE-2024-43541 is a denial of service vulnerability in the Microsoft Simple Certificate Enrollment Protocol affecting Windows Server 2008 Service Pack 2 and related versions. It allows an unauthenticated attacker to cause uncontrolled resource consumption, leading to service disruption. The vulnerability has a high severity score of 7.5 and has been officially fixed by Microsoft in specific updates.
CVE-2024-43515 is a high-severity denial of service vulnerability in the Internet Small Computer Systems Interface (iSCSI) component of Microsoft Windows 10 Version 1507 and related versions. It involves uncontrolled resource consumption that can cause system availability issues. The vulnerability affects multiple Windows 10 builds and some earlier Windows versions. Microsoft has released official fixes for all affected versions.
CVE-2024-43506 is a high-severity denial of service vulnerability in Microsoft Windows 10 Version 1507 and related versions. It involves uncontrolled resource consumption in the BranchCache component, which can cause system availability issues. The vulnerability has been officially fixed in multiple Windows 10 builds.
CVE-2024-8418 is a denial of service vulnerability in Aardvark-dns caused by serial processing of TCP DNS queries. An attacker can keep a TCP connection open indefinitely, causing the server to become unresponsive and resulting in DNS query timeouts. This disrupts normal DNS service availability and causes downtime.
There is a LOW severity vulnerability affecting CPython, specifically the
'http.cookies' standard library module.
When parsing cookies that contained backslashes for quoted characters in
the cookie value, the parser would use an algorithm with quadratic
complexity, resulting in excess CPU resources being used while parsing the
value.
REXML is an XML toolkit for Ruby. The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull parser API. The REXML gem 3.3.3 or later include the patch to fix the vulnerability.
REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as whitespace character, `>]` and `]>`. The REXML gem 3.3.3 or later include the patches to fix these vulnerabilities.
REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some DoS vulnerabilities when it parses an XML that has many specific characters such as `<`, `0` and `%>`. If you need to parse untrusted XMLs, you many be impacted to these vulnerabilities. The REXML gem 3.3.2 or later include the patches to fix these vulnerabilities. Users are advised to upgrade. Users unable to upgrade should avoid parsing untrusted XML strings.
The Premium Addons for Elementor plugin for WordPress is vulnerable to Regular Expression Denial of Service (ReDoS) in all versions up to, and including, 4.10.35. This is due to processing user-supplied input as a regular expression. This makes it possible for authenticated attackers, with Author-level access and above, to create and query a malicious post title, resulting in slowing server resources.
Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of an incorrect infinite timeout which allowed connections to remain open which should have been closed.
This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.0-M1 through 9.0.89.
The following versions were EOL at the time the CVE was created but are
known to be affected: 8.5.0 though 8.5.100. Other EOL versions may also be affected.
Users are recommended to upgrade to version 11.0.0-M21, 10.1.25 or 9.0.90, which fixes the issue.
CVE-2024-34364 is a medium severity vulnerability in Envoy proxy versions up to 1.30.1 that allows uncontrolled resource consumption leading to out-of-memory (OOM) conditions. The issue arises because the async HTTP client buffers mirrored responses using an unbounded buffer, which can exhaust system memory.
CVE-2024-35799 is a vulnerability in the Linux kernel's AMD display driver where disabling a stream encoder calls a function that no longer exists, causing a crash. The issue is resolved by checking if the function declaration is NULL before disabling the stream encoder.
REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `<`s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this vulnerability. As a workaround, don't parse untrusted XMLs.
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, a small amount of HTTP/2 traffic can lead to Suricata using a large amount of memory. The issue has been addressed in Suricata 7.0.5 and 6.0.19. Workarounds include disabling the HTTP/2 parser and reducing `app-layer.protocols.http2.max-table-size` value (default is 65536).
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->counters[IN_INITI][MSG_COUNTER][ProcedureCode_id_E2setup]->Increment().
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no memory is allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header frames we will process before closing a connection.