CWE-406 · 20 records

Insufficient Control of Network Message Volume (Network Amplification)

CVEs in this class

20 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
65This week	CVE-2022-0028Weaponized	PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filteringpaloaltonetworks · pan-os · CWE-406 Pre-auth Denial of service	High8.6	KEV	2.5%	Aug 10, 2022
39Monitor	CVE-2021-38135No exploit	Possible External service interaction Vulnerability in OpenText iManagermicrofocus · imanager · CWE-406 Pre-auth	Critical9.8	—	0.4%	Nov 22, 2024
38Monitor	CVE-2021-38425No exploit	eProsima Fast DDS Network Amplificationeprosima · fast dds · CWE-406 Pre-auth	Critical9.1	—	5.0%	May 5, 2022
36Monitor	CVE-2021-38487No exploit	Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Microrti · connext dds micro · CWE-406 Pre-auth	High8.8	—	3.3%	May 5, 2022
36Monitor	CVE-2021-38429No exploit	OCI OpenDDS Secure Network Amplificationobjectcomputing · opendds · CWE-406 Pre-auth	Critical9.1	—	1.4%	May 5, 2022
33Monitor	CVE-2021-43547No exploit	TwinOaks Computing CoreDX DDS Secure Network Amplificationtwinoakscomputing · coredx dds · CWE-406 Pre-auth	High8.2	—	2.5%	May 5, 2022
32Monitor	CVE-2024-2169Proof of concept	Implementations of UDP application protocols are susceptible to network loops and denial of servicemikrotik · routeros-tftp · CWE-406 Pre-auth Denial of service	High7.5	—	5.3%	Mar 19, 2024
30Monitor	CVE-2020-10772No exploit	An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414.nlnetlabs · unbound · CWE-406 Pre-auth Denial of service	High7.5	—	1.3%	Nov 27, 2020
30Monitor	CVE-2024-25015No exploit	IBM MQ denial of serviceibm · mq · CWE-406 Pre-auth Denial of service	High7.5	—	0.9%	May 1, 2024
30Monitor	CVE-2021-4234No exploit	OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the clopenvpn · openvpn access server · CWE-406 Pre-auth Denial of service	High7.5	—	0.8%	Jul 6, 2022
30Monitor	CVE-2023-49203No exploit	Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes acctechnitium · dnsserver · CWE-406 Pre-auth Denial of service	High7.5	—	0.6%	Sep 18, 2024
30Monitor	CVE-2023-28456No exploit	An issue was discovered in Technitium through 11.0.2.technitium · dnsserver · CWE-406 Pre-auth Denial of service	High7.5	—	0.5%	Sep 18, 2024
30Monitor	CVE-2023-28455No exploit	An issue was discovered in Technitium through 11.0.2.technitium · dnsserver · CWE-406 Pre-auth Denial of service	High7.5	—	0.5%	Sep 18, 2024
26Monitor	CVE-2026-68080No exploit	Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of serviceapache · qpid broker-j · CWE-406 Denial of service	Medium6.5	—	0.6%	Aug 5, 2026
21Monitor	CVE-2026-50045No exploit	'max-global-quota' reset by DNSSEC validation restartsnlnetlabs · unbound · CWE-406 Pre-auth Denial of service	Medium5.3	—	0.4%	Jul 22, 2026
21Monitor	CVE-2026-86202No exploit	PocketMine-MP before 5.39.2 Network Amplification via ActorEventPacketpmmp · pocketmine-mp · CWE-406	Medium5.3	—	0.3%	Sep 9, 2026
21Monitor	CVE-2025-58066No exploit	DoS Vulnerability in ntpd-rspendulum-project · ntpd-rs · CWE-406 Pre-auth Denial of service	Medium5.3	—	0.3%	Aug 29, 2025
18Monitor	CVE-2026-16515No exploit	ICMPv6 error messages sent for multicast-destined packets and non-unique source addresses enable network amplification in Zephyr's IPv6 stackzephyrproject · zephyr · CWE-406 Pre-auth Denial of service	Medium4.7	—	0.2%	Sep 18, 2026
17Monitor	CVE-2014-125036No exploit	drybjed ansible-ntp main.yml amplificationansible-ntp project · ansible-ntp · CWE-406 Pre-auth Denial of service	Medium4.3	—	0.4%	Jan 2, 2023
14Monitor	CVE-2019-14850No exploit	A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1.nbdkit project · nbdkit · CWE-406 Pre-auth Denial of service	Low3.7	—	1.6%	Mar 18, 2021

CVE-2022-0028
65This week
PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering
HighCVSS 8.6KEVWeaponizedEPSS 2%
- Pre-auth
- Denial of service
paloaltonetworks · pan-osAug 10, 2022
CVE-2021-38135
39Monitor
Possible External service interaction Vulnerability in OpenText iManager
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
microfocus · imanagerNov 22, 2024
CVE-2021-38425
38Monitor
eProsima Fast DDS Network Amplification
CriticalCVSS 9.1No exploitEPSS 5%
- Pre-auth
eprosima · fast ddsMay 5, 2022
CVE-2021-38487
36Monitor
Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro
HighCVSS 8.8No exploitEPSS 3%
- Pre-auth
rti · connext dds microMay 5, 2022
CVE-2021-38429
36Monitor
OCI OpenDDS Secure Network Amplification
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
objectcomputing · openddsMay 5, 2022
CVE-2021-43547
33Monitor
TwinOaks Computing CoreDX DDS Secure Network Amplification
HighCVSS 8.2No exploitEPSS 2%
- Pre-auth
twinoakscomputing · coredx ddsMay 5, 2022
CVE-2024-2169
32Monitor
Implementations of UDP application protocols are susceptible to network loops and denial of service
HighCVSS 7.5Proof of conceptEPSS 5%
- Pre-auth
- Denial of service
mikrotik · routeros-tftpMar 19, 2024
CVE-2020-10772
30Monitor
An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
nlnetlabs · unboundNov 27, 2020
CVE-2024-25015
30Monitor
IBM MQ denial of service
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
ibm · mqMay 1, 2024
CVE-2021-4234
30Monitor
OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the cl
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
openvpn · openvpn access serverJul 6, 2022
CVE-2023-49203
30Monitor
Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes acc
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
technitium · dnsserverSep 18, 2024
CVE-2023-28456
30Monitor
An issue was discovered in Technitium through 11.0.2.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
technitium · dnsserverSep 18, 2024
CVE-2023-28455
30Monitor
An issue was discovered in Technitium through 11.0.2.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
technitium · dnsserverSep 18, 2024
CVE-2026-68080
26Monitor
Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of service
MediumCVSS 6.5No exploitEPSS 0%
- Denial of service
apache · qpid broker-jAug 5, 2026
CVE-2026-50045
21Monitor
'max-global-quota' reset by DNSSEC validation restarts
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Denial of service
nlnetlabs · unboundJul 22, 2026
CVE-2026-86202
21Monitor
PocketMine-MP before 5.39.2 Network Amplification via ActorEventPacket
MediumCVSS 5.3No exploitEPSS 0%
pmmp · pocketmine-mpSep 9, 2026
CVE-2025-58066
21Monitor
DoS Vulnerability in ntpd-rs
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Denial of service
pendulum-project · ntpd-rsAug 29, 2025
CVE-2026-16515
18Monitor
ICMPv6 error messages sent for multicast-destined packets and non-unique source addresses enable network amplification in Zephyr's IPv6 stack
MediumCVSS 4.7No exploitEPSS 0%
- Pre-auth
- Denial of service
zephyrproject · zephyrSep 18, 2026
CVE-2014-125036
17Monitor
drybjed ansible-ntp main.yml amplification
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- Denial of service
ansible-ntp project · ansible-ntpJan 2, 2023
CVE-2019-14850
14Monitor
A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1.
LowCVSS 3.7No exploitEPSS 1%
- Pre-auth
- Denial of service
nbdkit project · nbdkitMar 18, 2021

All vulnerability classes