Common Weakness Enumeration
CWE-406 Insufficient Control of Network Message Volume (Network Amplification)
Description
The product does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the product to transmit more traffic than should be allowed for that actor.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-406 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-6w6g-hm98-mhgm | - | HIGH | - |
hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS) |
2026-10-05 |
| GHSA-85rg-p3fr-xc2f | CVE-2026-54609 | HIGH |
QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding |
2026-07-28 | |
| GHSA-7hmv-4j2j-pp6f | - | MODERATE | - |
PocketMine-MP: Network amplification vulnerability with `ActorEventPacket` |
2026-04-06 |
| GHSA-h656-5vcf-cm23 | - | MODERATE |
OpenClaw: Unauthorized Telegram Senders Trigger Media Download and Disk Write Before Access Check |
2026-03-03 | |
| GHSA-4855-q42w-5vr4 | CVE-2025-58066 | MODERATE | - |
DoS Vulnerability in ntpd-rs |
2025-08-29 |
| GHSA-gpxv-776p-7gc7 | CVE-2020-2100 | MODERATE |
Jenkins vulnerable to UDP amplification reflection attack |
2022-12-16 |