denial-of-service vulnerability