CVE-2002-20001
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not pub
CVSS
7.5
Alto
EPSS
24.6%
p98
KEV
—
Exploit Today
29
0-100
Publicado: 11 nov 2021 · Última mod.: 23 sept 2026 · CWE-400
24.6%EPSS · 30 días24.6%
2026-09-242026-10-23
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf
- dheatattack.comhttps://dheatattack.com
- dheatattack.gitlab.iohttps://dheatattack.gitlab.io/
- github.comhttps://github.com/Balasys/dheater
- github.comhttps://github.com/mozilla/ssl-config-generator/issues/162
- gitlab.comhttps://gitlab.com/dheatattack/dheater
- ieeexplore.ieee.orghttps://ieeexplore.ieee.org/document/10374117
- support.f5.comhttps://support.f5.com/csp/article/K83120834
- www.arubanetworks.comhttps://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-004.txt
- www.openssl.orghttps://www.openssl.org/blog/blog/2022/10/21/tls-groups-configuration/
- www.reddit.comhttps://www.reddit.com/r/netsec/comments/qdoosy/server_overload_by_enforcing_dhe_key_exchange/
- www.researchgate.nethttps://www.researchgate.net/profile/Anton-Stiglic-2/publication/2401745_Security_Issues_in_the_Diffie-Hellman_Key_Agreement_Protocol
- www.suse.comhttps://www.suse.com/support/kb/doc/?id=000020510
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf
- dheatattack.comhttps://dheatattack.com
- dheatattack.gitlab.iohttps://dheatattack.gitlab.io/
- github.comhttps://github.com/Balasys/dheater
- github.comhttps://github.com/mozilla/ssl-config-generator/issues/162
- gitlab.comhttps://gitlab.com/dheatattack/dheater
- ieeexplore.ieee.orghttps://ieeexplore.ieee.org/document/10374117
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-762907.5 ALT33.8%
——10In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package download endpoint in the Splunk Pipeline Builders app. The requests could cause the Splunk daemon to consume excessive system resources and potentially stop responding.
The vulnerability is possible because the endpoint accepts package download requests without authentication and reads and base64-encodes the complete package in memory for each request.
After upgrading, prepare all existing Edge Processor instances, turn on authentication for Edge Processor package downloads, and restart Splunk Enterprise. For more information, see Enable authentication for Edge Processor package downloads (https://help.splunk.com/en/data-management/process-data-at-the-edge/use-edge-processors-for-splunk-enterprise/10.4/administer-edge-processors/enable-authentication-for-edge-processor-package-downloads).1dCVE-2026-762887.5 ALT29.9%
——9In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a single crafted request to the Splunk Web JavaScript logger endpoint and cause Splunk Web to stop responding to requests. Splunk Web remains unavailable until Splunk Enterprise is restarted.
The vulnerability is possible because Splunk Web does not limit request-header parsing before processing the request.1dCVE-2026-96640—35.4%
——11Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save(..., format="PDF", append=True) processes an attacker-controlled existing PDF whose /Kids arrays repeatedly reference the same child /Pages node, Pillow expands the shared subtree as distinct pages. A compact malformed PDF can therefore create exponentially many page references and consume disproportionate CPU before the append completes. This issue is fixed in version 13.0.0.2dCVE-2026-966386.5 MED19.5%
——6Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src/PIL/BmpImagePlugin.py permits crafted RLE BMP delta escapes and absolute-mode runs to append beyond the remaining dest_length without a per-branch cap. A delta can add roughly 255 image rows in one iteration, so a kilobyte-sized file with a large but permitted width can expand the data bytearray to hundreds of megabytes or more, causing memory-exhaustion denial of service. This issue is fixed in version 13.0.0.2dCVE-2026-96637—25.4%
——8Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/SpiderImagePlugin.py reparses a later SPIDER stack frame and replaces self._size without rerunning Image._decompression_bomb_check(). A tiny file can use a safe first frame to pass Image.open() and then declare very large dimensions in a later mode F frame. Loading that frame allocates approximately four bytes per attacker-declared pixel and can consume multiple gigabytes of memory. This issue is fixed in version 13.0.0.2dCVE-2026-966366.5 MED19.5%
——6Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek() and DcxImageFile.seek() reparse later MPO or DCX frames and replace self._size without rerunning Image._decompression_bomb_check(). A crafted multi-frame image can use a tiny first frame to pass Image.open() and then declare an over-limit later frame. Normal frame iteration through seek(), load(), or ImageSequence.Iterator can decode that frame and commit hundreds of megabytes or more, causing memory-exhaustion denial of service. This issue is fixed in version 13.0.0.2d