CWE-406: Insufficient Control of Network Message Volume (Network Amplification)
The product does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the product to transmit more traffic than should be allowed for that actor.
A kind of CWE-405 Asymmetric Resource Consumption (Amplification).
From the CWE List. © The MITRE Corporation.
Newest
- eclipse foundation threadx netx duo Missing HelloVerifyRequest cookie validation in the NetX Secure DTLS server 6.9 Medium
-
hickory-resolvercrates.io hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS) 8.7 High - zephyrproject zephyr ICMPv6 error messages sent for multicast-destined packets and non-unique source addresses enable network amplification in Zephyr's IPv6 stack 4.7 Medium
- apache qpid broker-j Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of service 6.5 Medium
- quiet-terminal-interactive qtineon QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding 8.6 High
- nlnet labs unbound 'max-global-quota' reset by DNSSEC validation restarts 5.3 Medium
- synology dns server Technitium DNS Server excessive DNSSEC requests 6.9 Medium
- pmmp pocketmine-mp PocketMine-MP before 5.39.2 Network Amplification via ActorEventPacket 5.3 Medium
-
openclawnpm OpenClaw: Unauthorized Telegram Senders Trigger Media Download and Disk Write Before Access Check No score - pendulum-project ntpd-rs DoS Vulnerability in ntpd-rs 5.3 Medium
- microfocus imanager Possible External service interaction Vulnerability in OpenText iManager 8.6 High
- technitium dns server, dnsserver +1 more Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification)... 7.5 High
- technitium dns server, dnsserver +1 more An issue was discovered in Technitium through 11.0.2. It enables attackers to launch... 7.5 High
- technitium dns server, dnsserver +1 more An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to... 7.5 High
- ibm mq IBM MQ denial of service 7.5 High
- ansible-ntp project ansible-ntp drybjed ansible-ntp main.yml amplification 2.6 Low
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering 8.6 High
- openvpn access server OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a... 7.5 High
- objectcomputing opendds OCI OpenDDS Secure Network Amplification 6.6 Medium
- eprosima fast dds eProsima Fast DDS Network Amplification 7.5 High
- twinoaks computing coredx dds TwinOaks Computing CoreDX DDS Secure Network Amplification 7.5 High
- rti connext micro, connext professional, connext dds micro +3 more +5 more Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro 8.8 High
- mitel micollab, mivoice business express, micollab, mivoice business express +2 more The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business... 9.8 Critical
- microsoft nbdkit, redhat enterprise linux, enterprise linux server +1 more +3 more A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker... 3.7 Low
- nlnet labs unbound An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as... 7.5 High
- jenkins Jenkins vulnerable to UDP amplification reflection attack 5.8 Medium