CWE-408 · Denial of Service
Incorrect Behavior Order: Early Amplification
10CVEs
SortMost likely exploited
10 CVEs with CWE-408 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-1657Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.Juniper Networks · Junos OS · CVSS 7.5 · 2020-10-16 | 7.5 | 1.3% | 2020-10-16 |
| CVE-2026-119079Krb5: mit krb5 kdc unauthenticated cpu dos via quadratic asn.1 sequence of decodingRed Hat · Red Hat Enterprise Linux 10 · CVSS 7.5 · 2026-11-09 | 7.5 | 0.9% | 2026-11-09 |
| CVE-2026-11605Unnecessary validation of DNSSEC signed recordsISC · BIND 9 · CVSS 7.5 · 2026-07-22 | 7.5 | 0.7% | 2026-07-22 |
| CVE-2022-2576In Eclipse Californium version 2.0.0 to 2.7.2 and 3.0.0-3.5.0 a DTLS resumption handshake falls back to a DTLS full handshake on a parameter mismatch without using a HelloVerifyRe…The Eclipse Foundation · Eclipse Californium · 2022-07-29 | – | 0.6% | 2022-07-29 |
| CVE-2026-41405OpenClaw < 2026.3.31 - Resource Exhaustion via Unauthenticated MS Teams Webhook Body ParsingOpenClaw · OpenClaw · CVSS 7.5 · 2026-04-28 | 7.5 | 0.5% | 2026-04-28 |
| CVE-2026-41374OpenClaw < 2026.3.31 - Resource Consumption via Discord Audio Preflight Before Member AuthorizationOpenClaw · OpenClaw · CVSS 5.3 · 2026-04-28 | 5.3 | 0.5% | 2026-04-28 |
| CVE-2026-3592Amplification vulnerabilities via self-pointed glue recordsISC · BIND 9 · CVSS 5.3 · 2026-05-20 | 5.3 | 0.4% | 2026-05-20 |
| CVE-2026-41331OpenClaw < 2026.3.31 - Resource Consumption via Unauthorized Telegram Audio Preflight TranscriptionOpenClaw · OpenClaw · CVSS 5.3 · 2026-04-20 | 5.3 | 0.3% | 2026-04-20 |
| CVE-2026-46015tcp: call sk_data_ready() after listener migrationLinux · Linux · CVSS 7.8 · 2026-05-27 | 7.8 | 0.1% | 2026-05-27 |
| CVE-2026-104032Sssd: sssd: denial of service via unprivileged autofs cache invalidationRed Hat · Red Hat Enterprise Linux 10 · CVSS 5.5 · 2026-10-06 | 5.5 | 0.1% | 2026-10-06 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.