# Denial of service

An attacker can crash a service or exhaust its resources, so legitimate users can no longer reach it.

How to fix: Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service.


- [CVE-2025-39682](https://insights.sbomify.com/CVE-2025-39682/): Linux Kernel Improper Check for Unusual or Exceptional Conditions (critical 9.8, exploited in the wild)
- [CVE-2024-3393](https://insights.sbomify.com/CVE-2024-3393/): Palo Alto Networks PAN-OS Malicious DNS Packet (high 8.7, exploited in the wild)
- [CVE-2026-20349](https://insights.sbomify.com/CVE-2026-20349/): Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection (high 8.6, exploited in the wild)
- [CVE-2024-20353](https://insights.sbomify.com/CVE-2024-20353/): Cisco ASA and FTD Denial of Service (high 8.6, exploited in the wild)
- [CVE-2022-0028](https://insights.sbomify.com/CVE-2022-0028/): Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service (high 8.6, exploited in the wild)
- [CVE-2020-3569](https://insights.sbomify.com/CVE-2020-3569/): Cisco IOS XR Software DVMRP Memory Exhaustion (high 8.6, exploited in the wild)
- [CVE-2020-3566](https://insights.sbomify.com/CVE-2020-3566/): Cisco IOS XR Software DVMRP Memory Exhaustion (high 8.6, exploited in the wild)
- [CVE-2018-0155](https://insights.sbomify.com/CVE-2018-0155/): Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service (high 8.6, exploited in the wild)
- [CVE-2018-0158](https://insights.sbomify.com/CVE-2018-0158/): Cisco IOS and XE Software Internet Key Exchange Memory Leak (high 8.6, exploited in the wild)
- [CVE-2018-0173](https://insights.sbomify.com/CVE-2018-0173/): Cisco IOS and IOS XE Software Improper Input Validation (high 8.6, exploited in the wild)
- [CVE-2018-0174](https://insights.sbomify.com/CVE-2018-0174/): Cisco IOS Software and Cisco IOS XE Software Improper Input Validation (high 8.6, exploited in the wild)
- [CVE-2026-28318](https://insights.sbomify.com/CVE-2026-28318/): SolarWinds Serv-U Uncontrolled Resource Consumption (high 7.5, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/types/denial-of-service/