Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2011-06-21 CVE-2011-2188 Resource Management Errors vulnerability in Matthewwild Luaexpat 1.0/1.0.1/1.0.2
LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
network
low complexity
matthewwild CWE-399
5.0
2011-06-21 CVE-2011-1757 Resource Management Errors vulnerability in Brad Fitzpatrick Djabberd
DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
network
low complexity
brad-fitzpatrick CWE-399
5.0
2011-06-21 CVE-2011-1756 Resource Management Errors vulnerability in Citadel
modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
network
low complexity
citadel CWE-399
5.0
2011-06-21 CVE-2011-1754 Resource Management Errors vulnerability in Jabberd Jabberd14
jabberd14 1.6.1.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
network
low complexity
jabberd CWE-399
5.0
2011-06-21 CVE-2011-1753 Resource Management Errors vulnerability in Process-One Ejabberd and Exmpp
expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
network
low complexity
process-one CWE-399
5.0
2011-06-16 CVE-2011-1872 Resource Management Errors vulnerability in Microsoft Windows Server 2008 R2
Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause a denial of service (host OS infinite loop) via malformed machine instructions in a VMBus packet, aka "VMBus Persistent DoS Vulnerability."
4.7
2011-06-16 CVE-2011-1267 Resource Management Errors vulnerability in Microsoft Windows 7, Windows Server 2008 and Windows Vista
The SMB server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 request, aka "SMB Request Parsing Vulnerability."
network
low complexity
microsoft CWE-399
7.8
2011-06-06 CVE-2011-2174 Resource Management Errors vulnerability in Wireshark
Double free vulnerability in the tvb_uncompress function in epan/tvbuff.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a packet with malformed data that uses zlib compression.
network
wireshark CWE-399
4.3
2011-06-06 CVE-2011-1952 Resource Management Errors vulnerability in Postrev Post Revolution
common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via malformed HTML markup, as demonstrated by an a< sequence.
network
low complexity
postrev CWE-399
5.0
2011-06-06 CVE-2011-1783 Resource Management Errors vulnerability in Apache Http Server and Subversion
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is enabled, allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.
network
apache CWE-399
4.3