CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- symantec anti-virus engineThe kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote...9.1 Critical
- cisco iosThe packet-processing microcode in Cisco IOS 15.2(2)EA, 15.2(2)EA1, 15.2(2)EA2, and 15.2(4)EA on...7.5 High
- jboss enterprise application platformThe HTTPS NIO Connector allows remote attackers to cause a denial of service (thread consumption)...7.5 High
- cisco asa with firepower servicesThe Adaptive Security Appliance (ASA) 5585-X FirePOWER Security Services Processor (SSP) module...7.5 High
- cisco firesight system softwareCisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000...7.5 High
- wiresharkepan/dissectors/packet-spice.c in the SPICE dissector in Wireshark 2.x before 2.0.2 mishandles...5.9 Medium
- pgpdump project pgpdump, fedoraproject fedora +1 moreThe read_binary function in buffer.c in pgpdump before 0.30 allows context-dependent attackers to...7.5 High
- linux kernel, novell suse linux enterprise debuginfo, suse linux enterprise real time extension +2 moreMemory leak in the cuse_channel_release function in fs/fuse/cuse.c in the Linux kernel before 4.4...6.2 Medium
- openssl, redhat enterprise linux desktop, enterprise linux hpc node +5 more +7 moreThe asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in...7.5 High
- cisco adaptive security appliance softwareThe DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 allows...7.5 High
- cisco wireless lan controller softwareBuffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software...9.8 Critical
- cisco aireosCisco AireOS 4.1 through 7.4.120.0, 7.5.x, and 7.6.100.0 on Wireless LAN Controller (WLC) devices...7.5 High
- juniper junosJuniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D30, 12.3...7.5 High
- huawei s2300 firmware, s2350ei firmware, s3300 firmware +10 more +12 moreMemory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software...6.5 Medium
- huawei s2300 firmware, s2350ei firmware, s3300 firmware +8 more +10 moreMemory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series...7.5 High
- gnu libtasn1, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used...5.9 Medium
- hawk project hawkRegular Expression Denial of Service in hawk7.5 High
- huawei p8 firmwareThe graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA...5.5 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects...5.5 Medium
- dell emc powerscale onefs, netgear jr6150 firmware, samsung x14j firmware +2 more +4 moreThe kernel in Cisco TelePresence Server 3.0 through 4.2(4.18) on Mobility Services Engine (MSE)...5.9 Medium
- sun opensolaris, zyxel gs1900-10hp firmware, zzinc keymouse firmware +2 moreCisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE)...7.5 High
- cisco ios, nx-os +1 moreThe Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1...7.5 High
- cisco ios xe, lenovo thinkcentre e75s firmware, samsung x14j firmware +3 more +5 moreCisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager...7.5 High
- cisco ios xe, intel core i5-9400f firmware, netgear jr6150 firmware +4 more +6 moreThe Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through...7.5 High
- cisco ios xe, netgear jr6150 firmware, samsung x14j firmware +3 more +5 moreCisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial...7.5 High
- cisco ios xe, lenovo thinkcentre e75s firmware, netgear jr6150 firmware +4 more +6 moreThe IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote...5.9 Medium
- cisco iosThe Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5...7.5 High
- apple safari, iphone os +1 moreWebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary...8.8 High
- cisco ios xrCisco IOS XR through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices does not properly check...5.3 Medium
- cisco telepresence video communication server softwareCisco TelePresence Video Communication Server (VCS) X8.5.1 and X8.5.2 allows remote authenticated...6.5 Medium
- cisco dpq3925 8x4 docsis 3.0 wireless residential gateway with embedded digital voice adapterThe administration interface on Cisco DPQ3925 devices with firmware r1 allows remote attackers to...7.5 High
- cisco asa 5500 csc-ssm firmwareThe HTTPS inspection engine in the Content Security and Control Security Services Module (CSC-SSM...7.5 High
- mozilla firefox, novell suse package hub for suse linux enterprise, opensuse leap +1 more +3 moreMozilla Firefox before 45.0 on Linux, when an Intel video driver is used, allows remote attackers...6.5 Medium
- botan project botan, debian linux +1 moreThe BER decoder in Botan 1.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers...7.5 High
- cisco nx-os, unified computing system, netgear jr6150 firmware +4 more +6 moreCisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified...7.5 High
- jasper project jasper, canonical ubuntu linux +1 moreMemory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote...5.7 Medium
- linux kernel, novell suse linux enterprise debuginfo, suse linux enterprise desktop +6 more +8 morefs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which...6.2 Medium
- cisco videoscape distribution suite for internet streamingThe TCP implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.3...5.3 Medium
- opensslMemory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2...7.5 High
- wiresharkThe dnp3_al_process_object function in epan/dissectors/packet-dnp.c in the DNP3 dissector in...5.9 Medium
- linux kernelThe Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a...5.5 Medium
- fedoraproject 389 directory server, redhat enterprise linux, enterprise linux desktop +3 more +5 moreslapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3...7.5 High
- google sketchup, sap 3d visual enterprise viewer +1 moreMultiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers...8.8 High
- cisco iosCisco IOS 15.5(3)M and 15.6(1)T0a on Cisco 1000 Connected Grid routers allows remote...6.5 Medium
- zzinc keymouse firmwareCisco IOS 15.2(4)E on Industrial Ethernet 2000 devices allows remote attackers to cause a denial...6.5 Medium
- zyxel gs1900-10hp firmwareCisco Nexus 9000 Application Centric Infrastructure (ACI) Mode switches with software before 11.0...7.5 High
- rubyonrails rails, ruby on rails +1 moreactionpack is vulnerable to denial of service via a crafted HTTP Accept header7.5 High
- rubyonrails railsactionpack is vulnerable to denial of service because of a wildcard controller route7.5 High
- openstack swiftOpenStack Object Storage (Swift) allows remote attackers to cause a denial of service7.5 High
- openstack swiftOpenStack Object Storage (Swift) allows remote attackers to cause a denial of service7.5 High
- Show moreLoading…