Denial of service vulnerabilities
An attacker can crash a service or exhaust its resources, so legitimate users can no longer reach it.
Denial of service in numbers
sbomify tracks 36,532 denial of service vulnerabilities. Most are found in library (24%), kernel (23%) and server software (20%).
How to fix denial of service vulnerabilities
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service.
Most exploited denial of service vulnerabilities
- CVE-2025-39682 Linux Kernel Improper Check for Unusual or Exceptional Conditions
- CVE-2024-3393 Palo Alto Networks PAN-OS Malicious DNS Packet
- CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection
- CVE-2024-20353 Cisco ASA and FTD Denial of Service
- CVE-2022-0028 Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service
- CVE-2020-3569 Cisco IOS XR Software DVMRP Memory Exhaustion
- CVE-2020-3566 Cisco IOS XR Software DVMRP Memory Exhaustion
- CVE-2018-0155 Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service
- CVE-2018-0158 Cisco IOS and XE Software Internet Key Exchange Memory Leak
- CVE-2018-0173 Cisco IOS and IOS XE Software Improper Input Validation
- CVE-2018-0174 Cisco IOS Software and Cisco IOS XE Software Improper Input Validation
- CVE-2026-28318 SolarWinds Serv-U Uncontrolled Resource Consumption
Recently published
- CVE-2025-36061 TS4500 Tape Library Denial of Service
- CVE-2025-55667 Denial of service in n/a
- CVE-2026-107569 Unchecked Input for Loop Condition in hMailServer
- CVE-2026-108121 Koozali - SME Server Improper Input Validation in domain Creation Leads to Denial of Service
- CVE-2026-108837 Apache Kylin: Potential computed-column resource exhaustion
- CVE-2026-110673 Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag.
Other types of vulnerability
- Cross-site scripting54,178
- Memory corruption53,628
- 35,428
- Missing authorization28,513
- SQL injection23,565
- Path traversal19,236
- 16,160
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.