T1499.004 · Application or System Exploitation

T1499.004 · Application or System Exploitation · Sunturai

attack-patternenterprise-attackT1499.004

Application or System Exploitation

attack-pattern--2bee5ffb-7a7a-4119-b1f2-158151b19ac0

Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users. (Citation: Sucuri BIND9 August 2015) Some systems may automatically restart critical applications and services when crashes occur, but they can likely be re-exploited to cause a persistent denial of service (DoS) condition. Adversaries may exploit known or zero-day vulnerabilities to crash applications and/or systems, which may also lead to dependent applications and/or systems to be in a DoS condition. Crashed or restarted applications or systems may also have other effects such as Data Destruction, Firmware Corruption, Service Stop etc. which may further cause a DoS condition and deny availability to critical information, applications and/or systems.

Created: Feb 20, 2020, 3:37 PM UTC
Modified: Oct 24, 2025, 5:48 PM UTC

4 published detections cover this technique

Every one carries the source it came from and the licence it was published under.

Detections covering this technique
Detection	Severity	Source	Published	Licence
Abnormally Large DNS Response	Medium	Elastic detection rules	Aug 27, 2026	Elastic License 2.0
Audit CVE Event	Critical	SigmaHQ	Aug 26, 2026	Detection Rule License 1.1
Nginx Core Dump	High	SigmaHQ	Aug 26, 2026	Detection Rule License 1.1
Apache Segmentation Fault	High	SigmaHQ	Aug 26, 2026	Detection Rule License 1.1

Showing 4 of 4

Filter in the catalogue

External references

mitre-attackT1499.004Open reference

Sucuri BIND9 August 2015Open reference

Platforms

IaaSLinuxmacOSWindows

Kill chain phases

impact

Relationships

Incoming and outgoing edges in the selected ATT&CK release.

Incoming and outgoing edges in the selected ATT&CK release
Direction	Type	Related object