CVE-2023-26144

MEDIUM Year: 2023
CVSS v3 Score
5.3
Medium
Weakness Type
CWE-400
View all →

Vulnerability Description

Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries. This vulnerability allows an attacker to degrade system performance. **Note:** It was not proven that this vulnerability can crash the process.

Related Vulnerabilities

CVE-2016-0747

MEDIUM
CVSS:5.3(Medium)

The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of service (worker process resource consumption) vi...

CWE-4002016

CVE-2016-8367

MEDIUM
CVSS:5.3(Medium)

An issue was discovered in Schneider Electric Magelis HMI Magelis GTO Advanced Optimum Panels, all versions, Magelis GTU Universal Panel, all versions, Magelis STO5xx and STU Small panels, all version...

CWE-4002016

CVE-2017-1000359

MEDIUM
CVSS:5.3(Medium)

Java out of memory error and significant increase in resource consumption. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0.

CWE-4002017

CVE-2017-10621

MEDIUM
CVSS:5.3(Medium)

A denial of service vulnerability in telnetd service on Juniper Networks Junos OS allows remote unauthenticated attackers to cause a denial of service. Affected Junos OS releases are: 12.1X46 prior to...

CWE-4002017

CVE-2017-12093

MEDIUM
CVSS:5.3(Medium)

An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 Series B Firmware 21.2 and before. A specially crafted stream...

CWE-4002017

CVE-2017-15345

MEDIUM
CVSS:5.3(Medium)

Huawei Smartphones with software LON-L29DC721B186 have a denial of service vulnerability. An attacker could make an loop exit condition that cannot be reached by sending the crafted 3GPP message. Succ...

CWE-4002017