Vulnerabilities > Allocation of Resources Without Limits or Throttling

DATE CVE VULNERABILITY TITLE RISK
2019-02-07 CVE-2019-7581 Allocation of Resources Without Limits or Throttling vulnerability in Libming
The parseSWF_ACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure, a different vulnerability than CVE-2018-7876.
network
low complexity
libming CWE-770
8.8
2019-01-29 CVE-2019-7148 Allocation of Resources Without Limits or Throttling vulnerability in Elfutils Project Elfutils 0.174
An attempted excessive memory allocation was discovered in the function read_long_names in elf_begin.c in libelf in elfutils 0.174.
network
low complexity
elfutils-project CWE-770
6.5
2019-01-28 CVE-2019-6988 Allocation of Resources Without Limits or Throttling vulnerability in Uclouvain Openjpeg 2.3.0
An issue was discovered in OpenJPEG 2.3.0.
network
low complexity
uclouvain CWE-770
6.5
2019-01-25 CVE-2019-6966 Allocation of Resources Without Limits or Throttling vulnerability in Axiosys Bento4 1.5.1628
An issue was discovered in Bento4 1.5.1-628.
network
low complexity
axiosys CWE-770
6.5
2019-01-24 CVE-2019-6486 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.
network
low complexity
golang debian opensuse CWE-770
8.2
2019-01-23 CVE-2019-1644 Allocation of Resources Without Limits or Throttling vulnerability in Cisco IOT Field Network Director 4.3(0.20)
A vulnerability in the UDP protocol implementation for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to exhaust system resources, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-770
7.5
2019-01-15 CVE-2019-0010 Allocation of Resources Without Limits or Throttling vulnerability in Juniper Junos 12.1X46/12.3X48/15.1X49
An SRX Series Service Gateway configured for Unified Threat Management (UTM) may experience a system crash with the error message "mbuf exceed" -- an indication of memory buffer exhaustion -- due to the receipt of crafted HTTP traffic.
network
low complexity
juniper CWE-770
7.5
2019-01-15 CVE-2019-0005 Allocation of Resources Without Limits or Throttling vulnerability in Juniper Junos
On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers.
network
low complexity
juniper CWE-770
5.3
2019-01-10 CVE-2018-15460 Allocation of Resources Without Limits or Throttling vulnerability in Cisco Asyncos
A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to cause the CPU utilization to increase to 100 percent, causing a denial of service (DoS) condition on an affected device.
network
low complexity
cisco CWE-770
8.6
2019-01-10 CVE-2018-15458 Allocation of Resources Without Limits or Throttling vulnerability in Cisco Secure Firewall Management Center 6.2.2/6.2.3/6.3.0
A vulnerability in the Shell Access Filter feature of Cisco Firepower Management Center (FMC), when used in conjunction with remote authentication, could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-770
7.5