CVE Vulnerability Advisory Database

[Affected Scope] SolarWinds Serv-U file transfer server versions prior to 15.5.4 Hotfix 1

[Impact] Unauthenticated remote attackers can crash the Serv-U service instantly by sending specially crafted HTTP POST requests utilizing 'Content-Encoding: deflate'

[Mitigation] Immediately apply the official security patch (15.5.4 Hotfix 1 or later) or implement WAF rules to block specific compression headers

[Affected Scope] All Windows and Windows Server systems utilizing the Microsoft Defender Antimalware Engine.

[Impact] Unauthenticated remote attackers can crash the real-time protection engine, disabling endpoint security defenses and leaving the system exposed to subsequent attacks.

[Mitigation] Immediately update the Microsoft Defender engine to the latest version (1.1.24000.0 or higher) and verify automatic update configurations.

[Affected Scope] All web servers, reverse proxies, load balancers, and CDN architectures that have the HTTP/2 protocol enabled

[Impact] Attackers can cause a complete Denial of Service (DoS) by rapidly opening and immediately canceling (via RST_STREAM) a massive volume of HTTP/2 streams, exhausting server CPU and memory resources

[Mitigation] Immediately apply official security patches for your web servers (Nginx, Apache, IIS, etc.) and proxy devices, or restrict HTTP/2 concurrent streams and enforce strict rate limiting

[Affected Scope] .NET 6.0, .NET 7.0, ASP.NET Core, and Microsoft Visual Studio 2022 environments

[Impact] Unauthenticated remote attackers can trigger resource exhaustion (CPU/Memory) via crafted HTTP requests, leading to a complete Denial of Service (DoS)

[Mitigation] Immediately update the .NET SDK/Runtime and Visual Studio to the latest patched versions

[Affected Scope] Any network devices, virtualization hosts (such as VMware ESXi), and storage systems exposed to the internet with the Service Location Protocol (SLP, RFC 2608) enabled

[Impact] Unauthenticated remote attackers can leverage spoofed UDP traffic to launch massive reflective Denial-of-Service (DDoS) attacks, achieving an extreme amplification factor of up to 2,200x

[Mitigation] Immediately block external access to SLP ports (UDP/TCP 427) or completely disable the SLP daemon in environments where it is not required

[Affected Scope] Java applications utilizing Apache Log4j2 (log4j-core) versions 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1)

[Impact] Unauthenticated remote attackers can execute arbitrary code by forcing the application to load malicious Java classes from attacker-controlled LDAP or other JNDI-related endpoints, leading to full system compromise (CVSS 10.0 Critical)

[Mitigation] Immediately upgrade Log4j2 to the latest secure version (2.17.1 or higher; or 2.12.4 / 2.3.2 depending on Java version), or apply workarounds such as removing the JndiLookup class

[Affected Scope] Android and embedded devices powered by Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wearables chipsets

[Impact] A local attacker can trigger GPU memory allocation failures, leading to system resource exhaustion and a complete Denial of Service (DoS) on the affected device

[Mitigation] Apply the official security patches released by Qualcomm and device OEMs (Samsung, Google, etc.) in or after May 2021

[Affected Scope] Cisco IOS XR Software with the Distance Vector Multicast Routing Protocol (DVMRP) feature enabled

[Impact] An unauthenticated, remote attacker can cause an immediate crash of the IGMP process or exhaust system memory, leading to instability in critical routing protocols and denial of service (DoS)

[Mitigation] Apply official Cisco software updates, disable DVMRP multicast routing where not required, or implement IGMP packet filtering ACLs

[Affected Scope] Cisco IOS XR Software with the Distance Vector Multicast Routing Protocol (DVMRP) feature enabled

[Impact] Unauthenticated, remote attackers can cause complete memory exhaustion, leading to instability or crash of critical routing protocols and system processes (Denial of Service)

[Mitigation] Apply official Cisco software updates immediately, or implement temporary workarounds such as infrastructure ACLs to rate-limit or block unauthorized IGMP traffic

[Affected Scope] Cisco IOS 12.2(15) and earlier versions

[Impact] Remote attackers can cause a denial of service (refused VTY connections) by exhausting virtual terminal resources using crafted TCP connection requests

[Mitigation] Upgrade to a patched Cisco IOS release, disable Telnet in favor of SSH, and restrict VTY access using Access Control Lists (ACLs)