Tag: Denial of Service
Two pings can crash a MongoDB replica set at the worst moment
A pre-auth use-after-free lands a segfault on a member just as it wins an election.
A single hidden text can knock out an Android phone
A malformed WAP Push message crashes Android's telephony stack with no user interaction, and a flood of them can hold…
Small header batches blow up HTTP/3 servers in memory
Seven of ten HTTP/3 stacks cap compressed headers but not the unpacked result, so a slim request can eat gigabytes…
F5 patches three critical NGINX overflows reachable without a login
Eleven defects ship in the release, and two of the critical ones let an unauthenticated request overflow memory in specific…
CDN Tsunami turns HTTP/3 edge into 350x flood amplifier
New research shows CDN protocol conversion can amplify a low-bandwidth attack stream up to 350x at the origin.
Cisco firewalls rebootable by crafted SSL VPN requests in new bug
Cisco warns an unauthenticated attacker can crash ASA and FTD firewalls with a single crafted HTTP request.
Critical Nginx bug CVE-2026-42533 allows remote code execution via HTTP
F5 patched a critical Nginx heap buffer overflow that lets unauthenticated attackers crash workers or achieve remote code execution.