Threats Tagged 'cwe-606'

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

CVE-2026-42561 is a denial of service vulnerability in the python-multipart library used by Red Hat Satellite's Lightspeed component. An attacker can send specially crafted multipart/form-data requests with excessive part headers or very large header values, causing excessive CPU utilization and service disruption. This vulnerability affects all versions of Red Hat Satellite. No official fix is currently available, and the vulnerability is rated as high severity by Red Hat.

Mermaid versions from 11.6.0 up to but not including 11.16.1 contain a vulnerability where the Radar Diagrams feature accepts arbitrarily large values for the ticks parameter. This unchecked input can cause excessive CPU usage and potentially freeze the rendering webpage or JavaScript process until it is terminated due to resource exhaustion. The issue is resolved in version 11.16.1.

An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue.

CVE-2026-67554 is a denial of service vulnerability in Apache Qpid Proton Dotnet where an authenticated attacker can send a disposition frame with large or illegal ranges. This causes excessive CPU usage due to improper handling of loop conditions. The issue affects versions up to and including 1.0.0. Upgrading to version 1.1.0 resolves the problem.

An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue.

CVE-2026-55731 is a medium severity vulnerability affecting the SNMP agent in Loytec LIP-ME201C and related products up to version 8.4.16 on LINX-A64. It involves unchecked input used as a loop condition, allowing an unauthenticated remote attacker to cause persistent denial of service through CPU exhaustion by sending a crafted SNMP GETNEXT request with a large OID component.