CVSS: 5.3EPSS: 0%CPEs: -EXPL: 0CVE-2024-38828 – CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter
https://notcve.org/view.php?id=CVE-2024-38828
Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack. • https://spring.io/security/cve-2024-38828 •
CVSS: 7.5EPSS: 0%CPEs: -EXPL: 0CVE-2019-25220
https://notcve.org/view.php?id=CVE-2019-25220
Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (aka a "Chain Width Expansion" attack) because a node does not first verify that a presented chain has enough work before committing to store it. • https://bitcoincore.org/en/2024/09/18/disclose-headers-oom https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-October/017354.html • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 7.5EPSS: 0%CPEs: -EXPL: 0CVE-2024-52914
https://notcve.org/view.php?id=CVE-2024-52914
In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction. • https://bitcoincore.org/en/2024/07/03/disclose-orphan-dos https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 7.5EPSS: 0%CPEs: -EXPL: 0CVE-2024-52915
https://notcve.org/view.php?id=CVE-2024-52915
Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption) via a crafted INV message. • https://bitcoincore.org/en/2024/07/03/disclose-inv-buffer-blowup https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 7.5EPSS: 0%CPEs: -EXPL: 0CVE-2024-52916
https://notcve.org/view.php?id=CVE-2024-52916
Bitcoin Core before 0.15.0 allows a denial of service (OOM kill of a daemon process) via a flood of minimum difficulty headers. • https://bitcoincore.org/en/2024/07/03/disclose-header-spam https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures • CWE-770: Allocation of Resources Without Limits or Throttling •