CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- ffmpegDouble free vulnerability in the vp3_update_thread_context function in libavcodec/vp3.c in FFmpeg...6.8 Medium
- google chromeUse-after-free vulnerability in the editing implementation in Blink, as used in Google Chrome...6.8 Medium
- cybozu garoonThe server in Cybozu Garoon before 3.7 SP1 allows remote attackers to cause a denial of service ...5.0 Medium
- cisco ios xeCisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to...7.1 High
- codeaurora android-msmThe genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as...4.9 Medium
- clusterlabs pacemaker, redhat enterprise linux +1 morePacemaker 1.1.10, when remote Cluster Information Base (CIB) configuration or resource management...4.3 Medium
- canonical ubuntu linux, quassel-irc quassel irc +1 morectcphandler.cpp in Quassel before 0.6.3 and 0.7.x before 0.7.1 allows remote attackers to cause a...5.0 Medium
- cisco ios xeCisco IOS XE 3.8S(.2) and earlier does not properly use a DHCP pool during assignment of an IP...6.3 Medium
- linux kernelMemory leak in the __kvm_set_memory_region function in virt/kvm/kvm_main.c in the Linux kernel...4.0 Medium
- microsoft wordMicrosoft Word 2003 SP2 and SP3 on Windows XP SP3 allows remote attackers to cause a denial of...7.1 High
- google chromeUse-after-free vulnerability in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome...6.8 Medium
- google chromeUse-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to...7.5 High
- google chromeUse-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html...6.8 Medium
- google chrome, debian linux, opensuse +2 moreUse-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to...7.5 High
- cisco iosMultiple memory leaks in Cisco IOS 15.1 before 15.1(4)M7 allow remote attackers to cause a denial...7.8 High
- linux kernel, canonical ubuntu linux +1 moreThe skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12...7.1 High
- openstack folsom, grizzly, havana +2 moreOpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image1.9 Low
- apple mac os xThe kernel in Apple Mac OS X before 10.9 does not properly check for errors during the processing...5.7 Medium
- cisco adaptive security appliance softwareThe VPN authentication functionality in Cisco Adaptive Security Appliance (ASA) Software allows...5.4 Medium
- cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.2), 8.7 before 8.7(1.8), 9.0...8.5 High
- ibm websphere message brokerThe XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0...4.3 Medium
- iodata hdl-a\/e, hdl-a firmware, hdl-ah +4 more +6 moreI-O DATA DEVICE HDL-A and HDL2-A devices with firmware 1.07 and earlier do not properly manage...6.8 Medium
- xenUse-after-free vulnerability in the libxl_list_cpupool function in the libxl toolstack library in...4.4 Medium
- google chrome, debian linux, opensuse +2 moreUse-after-free vulnerability in the HTMLFormElement::prepareForSubmission function in core/html...6.8 Medium
- google chromeUse-after-free vulnerability in the IndentOutdentCommand::tryIndentingAsListItem function in core...6.8 Medium
- google chromeUse-after-free vulnerability in core/xml/XMLHttpRequest.cpp in Blink, as used in Google Chrome...6.8 Medium
- cisco identity services engine, identity services engine software +1 moreThe file-upload feature in Cisco Identity Services Engine (ISE) allows remote authenticated users...6.8 Medium
- qemuUse-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows...2.3 Low
- x x.org x11Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server...6.5 Medium
- redhat enterprise mrgCumin, as used in Red Hat Enterprise MRG 2.4, allows remote attackers to cause a denial of...5.0 Medium
- microsoft internet explorerUse-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet...8.8 High
- microsoft windows 7, windows server 2008, windows vista +2 moredxgkrnl.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2...7.2 High
- microsoft windows 7win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1...7.2 High
- microsoft windows 7, windows 8, windows rt +5 more +7 moreUse-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2...7.2 High
- microsoft windows 7, windows 8, windows rt +5 more +7 moreThe DSA_InsertItem function in Comctl32.dll in the Windows common control library in Microsoft...10.0 High
- mcafee agentFrameworkService.exe in McAfee Framework Service in McAfee Managed Agent (MA) before 4.5.0.1927...5.0 Medium
- rsyslogDouble free vulnerability in the writeDataError function in the ElasticSearch plugin ...6.8 Medium
- cisco ios xrThe UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet...7.8 High
- google chromeUse-after-free vulnerability in International Components for Unicode (ICU), as used in Google...7.5 High
- google chromeUse-after-free vulnerability in core/html/HTMLTemplateElement.cpp in Blink, as used in Google...6.8 Medium
- google chromeDouble free vulnerability in the ResourceFetcher::didLoadResource function in core/fetch...6.8 Medium
- google chromeUse-after-free vulnerability in the RenderBlock::collapseAnonymousBlockChild function in core...7.5 High
- google chromeUse-after-free vulnerability in the color-chooser dialog in Google Chrome before 30.0.1599.66 on...6.8 Medium
- google chromeUse-after-free vulnerability in the XMLDocumentParser::append function in core/xml/parser...6.8 Medium
- google chromeUse-after-free vulnerability in the PepperInProcessRouter::SendToHost function in content...7.5 High
- google chromeUse-after-free vulnerability in the XSLStyleSheet::compileStyleSheet function in core/xml...6.8 Medium
- google chromeUse-after-free vulnerability in modules/webaudio/AudioScheduledSourceNode.cpp in the Web Audio...7.5 High
- google chromeUse-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows...7.5 High
- mongodbThe find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote...6.5 Medium
- xenOff-by-one error in the __addr_ok macro in Xen 3.3 and earlier allows local 64 bit PV guest...5.5 Medium
- Show moreLoading…