Denial of Service

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. Infinite open connection causes OctoRPKI to hang foreverCVE-2021-3909Cloudflare · CVSS 4.4 · 1.6% likely

   CWE-400

2. Unlimited resource allocation by QUIC CRYPTO frames flooding in quicheCVE-2024-1765Cloudflare · CVSS 5.9 · 1.1% likely

   CWE-770

3. Incorrect congestion window growth by invalid ACK rangesCVE-2025-4821Cloudflare · CVSS 7.5 · 1.0% likely

   CWE-770

4. Multiple DoS Attack Vectors in sflow packet handlingCVE-2022-2529Cloudflare · CVSS 7.5 · 1.0% likely

   CWE-4001 bounty report

5. Incorrect congestion window growth by optimistic ACKCVE-2025-4820Cloudflare · CVSS 5.3 · 0.9% likely

   CWE-770

6. OctoRPKI crashes when processing GZIP bomb returned via malicious repositoryCVE-2021-3912Cloudflare · CVSS 4.2 · 0.9% likely

   CWE-400

7. Unbounded queuing of path validation messages in cloudflare-quicheCVE-2023-6193Cloudflare · CVSS 5.3 · 0.8% likely

   CWE-400

8. Infinite certificate chain depth results in OctoRPKI running foreverCVE-2021-3908Cloudflare · CVSS 5.9 · 0.7% likely

   CWE-400

9. Unbounded storage of information related to connection ID retirement, in quicheCVE-2024-1410Cloudflare · CVSS 3.7 · 0.7% likely

   CWE-400

10. Resource exhaustion via memory leak in tokio-boringCVE-2023-6180Cloudflare · CVSS 5.3 · 0.6% likely

    CWE-400

11. Resource exhaustion in quiche HTTP/3 and QPACK layersCVE-2026-12523Cloudflare · CVSS 7.5 · 0.5% likelycovered by CyberSIXT

    CWE-4002 articles

12. Infinite loop triggered by connection ID retirementCVE-2025-7054Cloudflare · CVSS 8.7 · 0.5% likely

    CWE-835

13. Unbounded path event queue growth in quiche via peer-driven source connection ID rotationCVE-2026-12707Cloudflare · CVSS 7.5 · 0.4% likely

    CWE-770

14. Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limitsCVE-2026-105297Cloudflare · CVSS 7.5 · 0.4% likely

    CWE-770

15. Unbounded HTTP/3 Datagram flow map growth in tokio-quicheCVE-2026-12708Cloudflare · CVSS 8.7 · 0.4% likely

    CWE-401

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.