Security advisory2026-10-16Software component projectSecurity advisory

Software component issue could make the service unavailable

A public security advisory describes this issue. Review the linked source for the technical details and remediation guidance.

What happened

  • Integer overflow in OpenModSim (<=1.11.0), leading to denial of serviceSecurity Advisory CVE-2025-66969
  • Integer overflow in OpenModSim (<=1.11.0), leading to denial of serviceAdvisory description (CVE-2025-66969)

Contributing factors stated by the source

  • Integer overflow in OpenModSim (<=1.11.0), leading to denial of service

The failure pattern

Retry amplification and runaway resource consumptionRetries, loops or an expensive input multiply load until a partial failure becomes a full outage or a runaway bill.How to prevent it
Watch the pattern: Retry amplification and runaway resource consumption

Related standards

CollectSEA's mapping through this incident's failure pattern; not an official determination by the standards bodies.

Building something similar?

Describe your design and see every precedent that applies, with safeguards you can hand to your coding agent.

Analyze your design

Incidents with the same pattern

Security advisory2026-10-16

Software component issue could make the service unavailable

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, rawtoint in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit…

Retry amplification and runaway resource consumptionnvd.nist.gov
Security advisory2026-10-16

Software component issue could make the service unavailable

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSECGSS (Remote…

Retry amplification and runaway resource consumptionnvd.nist.gov