Vulnerabilities > Allocation of Resources Without Limits or Throttling

DATE CVE VULNERABILITY TITLE RISK
2022-08-23 CVE-2022-25761 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
The package open62541/open62541 before 1.2.5, from 1.3-rc1 and before 1.3.1 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions.
network
low complexity
open62541 fedoraproject CWE-770
7.5
2022-08-23 CVE-2022-25888 Allocation of Resources Without Limits or Throttling vulnerability in Opcua Project Opcua
The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions.
network
low complexity
opcua-project CWE-770
7.5
2022-08-16 CVE-2020-14322 Allocation of Resources Without Limits or Throttling vulnerability in Moodle
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it can load to help mitigate the risk of denial of service.
network
low complexity
moodle CWE-770
7.5
2022-08-16 CVE-2022-35009 Allocation of Resources Without Limits or Throttling vulnerability in Pngdec Project Pngdec 1.0.0/1.0.1
PNGDec commit 8abf6be was discovered to contain a memory allocation problem via asan_malloc_linux.cpp.
network
low complexity
pngdec-project CWE-770
6.5
2022-08-16 CVE-2022-35107 Allocation of Resources Without Limits or Throttling vulnerability in Swftools
SWFTools commit 772e55a2 was discovered to contain a stack overflow via vfprintf at /stdio-common/vfprintf.c.
local
low complexity
swftools CWE-770
5.5
2022-08-16 CVE-2022-35111 Allocation of Resources Without Limits or Throttling vulnerability in Swftools
SWFTools commit 772e55a2 was discovered to contain a stack overflow via __sanitizer::StackDepotNode::hash(__sanitizer::StackTrace const&) at /sanitizer_common/sanitizer_stackdepot.cpp.
local
low complexity
swftools CWE-770
5.5
2022-08-16 CVE-2022-36146 Allocation of Resources Without Limits or Throttling vulnerability in Swfmill
SWFMill commit 53d7690 was discovered to contain a memory allocation issue via operator new[](unsigned long) at asan_new_delete.cpp.
local
low complexity
swfmill CWE-770
5.5
2022-08-16 CVE-2022-36155 Allocation of Resources Without Limits or Throttling vulnerability in Monostream Tifig 0.2.2
tifig v0.2.2 was discovered to contain a resource allocation issue via operator new(unsigned long) at asan_new_delete.cpp.
local
low complexity
monostream CWE-770
5.5
2022-08-11 CVE-2022-38155 Allocation of Resources Without Limits or Throttling vulnerability in Samsung Mtower 0.1.0/0.2.0/0.3.0
TEE_Malloc in Samsung mTower through 0.3.0 allows a trusted application to achieve Excessive Memory Allocation via a large len value, as demonstrated by a Numaker-PFM-M2351 TEE kernel crash.
network
low complexity
samsung CWE-770
7.5
2022-08-10 CVE-2022-36324 Allocation of Resources Without Limits or Throttling vulnerability in Siemens products
Affected devices do not properly handle the renegotiation of SSL/TLS parameters.
network
low complexity
siemens CWE-770
7.5