CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- linux kernelThe cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain...5.5 Medium
- linux kernelThe mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure...5.5 Medium
- soap\ \In Soap Lite (aka the SOAP::Lite extension for Perl) 1.14 and earlier, an example attack consists...7.5 High
- cisco virtualized packet core, asr 5000 series software +1 moreA vulnerability in the IPsec component of StarOS for Cisco ASR 5000 Series routers could allow an...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory...5.9 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop,...5.9 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer...5.9 Medium
- wiresharkIn Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by...5.9 Medium
- jasper project jasperThe jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to...5.5 Medium
- cisco asr 5000 softwareA vulnerability in the Slowpath of StarOS for Cisco ASR 5500 Series routers with Data Processing...7.5 High
- docker2aci project docker2aciDenial of Service in docker2aci4.0 Medium
- cisco secure firewall management centerA vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System...7.5 High
- cisco wide area application servicesA vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS...5.9 Medium
- digium asterisk, certified asterisk, debian linux +2 morechain_sip in Asterisk Open Source 11.x before 11.23.1 and 13.x 13.11.1 and Certified Asterisk 11...7.5 High
- linux kernelfs/overlayfs/copy_up.c in the Linux kernel before 4.2.6 uses an incorrect cleanup code path,...5.5 Medium
- libass project libass, fedoraproject fedora, opensuse leap +1 more +3 moreThe check_allocations function in libass/ass_shaper.c in libass before 0.13.4 allows remote...7.5 High
- google androidThe GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before...5.9 Medium
- linux kernel, oracle linux, vm server +2 moreThe IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of...7.5 High
- openstack cinder, glance, nova +2 moreOpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption7.5 High
- cisco adaptive security appliance softwareThe DHCP Relay implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4.7.29 and 9...6.5 Medium
- cisco nx-osCisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 3000, 3500, 5000, 5500, 5600,...7.5 High
- cisco nx-osCisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000,...7.5 High
- cisco iosThe IKEv2 client and initiator implementations in Cisco IOS 15.5(3)M and IOS XE allow remote...6.5 Medium
- cisco ios xrCisco IOS XR 5.2.2 allows remote attackers to cause a denial of service (process restart) via a...5.3 Medium
- cisco ios, ios xe +1 moreThe AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18...7.5 High
- cisco iosCisco IOS 12.2 and 15.0 through 15.3 allows remote attackers to cause a denial of service ...7.5 High
- cisco ios, ios xe +1 moreMemory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2...7.5 High
- cisco ios xeCisco IOS XE 3.1 through 3.17 and 16.1 through 16.2 allows remote attackers to cause a denial of...7.5 High
- cisco ios, ios xe +1 moreCisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a...7.5 High
- cisco ios xe, ios xe 16.1, ios xe 3.2ja +3 more +5 moreCisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a...7.5 High
- cisco ios, ios xe +1 moreCisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1 allow remote attackers to cause...7.5 High
- cisco ios, ios xe, ios xe 16.1 +3 more +5 moreCisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers...7.5 High
- qemuThe imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly...4.4 Medium
- redhat jboss enterprise application platformUndertow Uncaught Exception vulnerability5.9 Medium
- apache derbyImproper Restriction of XML External Entity Reference in Apace Derby9.1 Critical
- graphicsmagick, debian linux, opensuse leap +1 more +3 moreThe Utah RLE reader in GraphicsMagick before 1.3.25 allows remote attackers to cause a denial of...7.5 High
- openstack compute \(nova\)OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which...6.5 Medium
- huawei s12700 firmware, s5300 firmware, s5700 firmware +5 more +7 moreMemory leak in Huawei S9300, S5300, S5700, S6700, S7700, S9700, and S12700 devices allows remote...7.5 High
- opensslstatem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory...5.9 Medium
- apple tvos, watchos, iphone os +1 more +3 moreThe kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows...7.5 High
- cisco iosThe Data in Motion (DMo) component in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is...7.5 High
- cisco iosThe Data in Motion (DMo) application in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set...5.9 Medium
- cisco ios xrCisco IOS XR 6.0 and 6.0.1 on NCS 6000 devices allows remote attackers to cause a denial of...5.3 Medium
- cisco web security applianceCisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers...7.5 High
- cisco carrier routing systemCisco Carrier Routing System (CRS) 5.1 and 5.1.4, as used in CRS Carrier Grade Services for CRS-1...5.3 Medium
- openssl, oracle linux +1 moreThe DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue...7.5 High
- cisco wireless lan controller software, wireless lan controller software 6.0, wireless lan controller software 7.0 +3 more +5 moreCisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0,...5.3 Medium
- cisco spa300 firmware, spa500 firmware +1 moreThe HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a...7.5 High
- libarchive, oracle linux, redhat enterprise linux desktop +6 more +8 morelibarchive before 3.2.0 does not limit the number of recursive decompressions, which allows...5.5 Medium
- powerdns authoritativePowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a . (dot) inside...7.5 High
- Show moreLoading…