CWE-406 · Denial of Service
Insufficient Control of Network Message Volume (Network Amplification)
21CVEs
SortMost likely exploited
21 CVEs with CWE-406 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-0028In CISA KEVExploitedPAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL FilteringPalo Alto Networks · Cloud NGFW · CVSS 8.6 · 2022-08-10 | 8.6 | 2.7% | 2022-08-10 |
| CVE-2024-2169Implementations of UDP application protocols are susceptible to network loops and denial of serviceMikroTik · RouterOS-TFTP · CVSS 7.5 · 2024-03-19 | 7.5 | 5.4% | 2024-03-19 |
| CVE-2021-38425eProsima Fast DDS Network AmplificationeProsima · Fast DDS · CVSS 7.5 · 2022-05-05 | 7.5 | 5.0% | 2022-05-05 |
| CVE-2021-38487Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext MicroRTI · Connext Professional · CVSS 8.2 · 2022-05-05 | 8.2 | 3.4% | 2022-05-05 |
| CVE-2021-43547TwinOaks Computing CoreDX DDS Secure Network AmplificationTwinOaks Computing · CoreDX DDS · CVSS 7.5 · 2022-05-05 | 7.5 | 2.5% | 2022-05-05 |
| CVE-2019-14850A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the nbdkit service and cause it to perform a large amount of wor…Nbdkit Project · nbdkit · 2021-03-18 | – | 1.6% | 2021-03-18 |
| CVE-2021-38429OCI OpenDDS Secure Network AmplificationOCI · OpenDDS · CVSS 6.6 · 2022-05-05 | 6.6 | 1.5% | 2022-05-05 |
| CVE-2020-10772An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify a…Nlnetlabs · unbound · 2020-11-27 | – | 1.3% | 2020-11-27 |
| CVE-2024-25015IBM MQ denial of serviceIBM · MQ · CVSS 7.5 · 2024-05-01 | 7.5 | 0.9% | 2024-05-01 |
| CVE-2021-4234OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not re…Openvpn · OpenVPN Access Server · 2022-07-06 | – | 0.9% | 2022-07-06 |
| CVE-2026-68080Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of serviceApache Software Foundation · Apache Qpid Broker-J · CVSS 6.5 · 2026-08-05 | 6.5 | 0.7% | 2026-08-05 |
| CVE-2023-49203Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes accumulation of low-rate DNS queries such…Technitium · Dnsserver · CVSS 7.5 · 2024-09-18 | 7.5 | 0.6% | 2024-09-18 |
| CVE-2023-28456An issue was discovered in Technitium through 11.0.2. It enables attackers to launch amplification attacks (3 times more than other "golden model" software like BIND) and cause po…Technitium · Dnsserver · CVSS 7.5 · 2024-09-18 | 7.5 | 0.5% | 2024-09-18 |
| CVE-2023-28455An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using Technitium resolvers, launching amplification attacks and…Technitium · Dnsserver · CVSS 7.5 · 2024-09-18 | 7.5 | 0.5% | 2024-09-18 |
| CVE-2026-50045'max-global-quota' reset by DNSSEC validation restartsNLnet Labs · Unbound · CVSS 5.3 · 2026-07-22 | 5.3 | 0.5% | 2026-07-22 |
| CVE-2026-54609QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwardingQuiet-Terminal-Interactive · QTINeon · CVSS 8.6 · 2026-07-28 | 8.6 | 0.5% | 2026-07-28 |
| CVE-2014-125036drybjed ansible-ntp main.yml amplificationdrybjed · ansible-ntp · CVSS 2.6 · 2023-01-02 | 2.6 | 0.4% | 2023-01-02 |
| CVE-2026-45557Technitium DNS Server excessive DNSSEC requestsTechnitium · DNS Server · CVSS 5.8 · 2026-05-19 | 5.8 | 0.4% | 2026-05-19 |
| CVE-2026-86202PocketMine-MP before 5.39.2 Network Amplification via ActorEventPacketpmmp · PocketMine-MP · CVSS 4.3 · 2026-09-09 | 4.3 | 0.4% | 2026-09-09 |
| CVE-2025-58066DoS Vulnerability in ntpd-rspendulum-project · ntpd-rs · CVSS 5.3 · 2025-08-29 | 5.3 | 0.3% | 2025-08-29 |
| CVE-2026-16515ICMPv6 error messages sent for multicast-destined packets and non-unique source addresses enable network amplification in Zephyr's IPv6 stackzephyrproject · zephyr · CVSS 4.7 · 2026-09-18 | 4.7 | 0.2% | 2026-09-18 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.