Vulnerabilities > Allocation of Resources Without Limits or Throttling

DATE CVE VULNERABILITY TITLE RISK
2019-05-22 CVE-2018-7821 Allocation of Resources Without Limits or Throttling vulnerability in Schneider-Electric Modicon M221 Firmware and Somachine Basic
An Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221(all references, all versions prior to firmware V1.10.0.0) which could cause cycle time impact when flooding the M221 ethernet interface while the Ethernet/IP adapter is activated.
network
low complexity
schneider-electric CWE-770
7.5
2019-05-16 CVE-2019-1814 Allocation of Resources Without Limits or Throttling vulnerability in Cisco products
A vulnerability in the interactions between the DHCP and TFTP features for Cisco Small Business 300 Series (Sx300) Managed Switches could allow an unauthenticated, remote attacker to cause the device to become low on system memory, which in turn could lead to an unexpected reload of the device and result in a denial of service (DoS) condition on an affected device.
network
low complexity
cisco CWE-770
8.6
2019-05-15 CVE-2019-1806 Allocation of Resources Without Limits or Throttling vulnerability in Cisco products
A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Small Business Sx200, Sx300, Sx500, ESW2 Series Managed Switches and Small Business Sx250, Sx350, Sx550 Series Switches could allow an authenticated, remote attacker to cause the SNMP application of an affected device to cease processing traffic, resulting in the CPU utilization reaching one hundred percent.
network
low complexity
cisco CWE-770
7.7
2019-05-03 CVE-2019-1703 Allocation of Resources Without Limits or Throttling vulnerability in Cisco Firepower Threat Defense
A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense (FTD) Software for the Cisco Firepower 2100 Series could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-770
8.6
2019-05-03 CVE-2018-15462 Allocation of Resources Without Limits or Throttling vulnerability in Cisco Firepower Threat Defense
A vulnerability in the TCP ingress handler for the data interfaces that are configured with management access to Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an increase in CPU and memory usage, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-770
7.5
2019-04-25 CVE-2019-3721 Allocation of Resources Without Limits or Throttling vulnerability in Dell EMC Openmanage Server Administrator
Dell EMC Open Manage System Administrator (OMSA) versions prior to 9.3.0 contain an Improper Range Header Processing Vulnerability.
network
low complexity
dell CWE-770
7.5
2019-04-17 CVE-2019-10953 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions.
7.5
2019-04-10 CVE-2019-0038 Allocation of Resources Without Limits or Throttling vulnerability in Juniper Junos
Crafted packets destined to the management interface (fxp0) of an SRX340 or SRX345 services gateway may create a denial of service (DoS) condition due to buffer space exhaustion.
low complexity
juniper CWE-770
6.5
2019-04-10 CVE-2019-0031 Allocation of Resources Without Limits or Throttling vulnerability in Juniper Junos 17.4/18.1/18.1R
Specific IPv6 DHCP packets received by the jdhcpd daemon will cause a memory resource consumption issue to occur on a Junos OS device using the jdhcpd daemon configured to respond to IPv6 requests.
network
low complexity
juniper CWE-770
7.5
2019-04-03 CVE-2019-10723 Allocation of Resources Without Limits or Throttling vulnerability in Podofo Project Podofo 0.9.6
An issue was discovered in PoDoFo 0.9.6.
local
low complexity
podofo-project CWE-770
5.5