Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2011-05-04 CVE-2011-0714 Resource Management Errors vulnerability in multiple products
Use-after-free vulnerability in a certain Red Hat patch for the RPC server sockets functionality in the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 might allow remote attackers to cause a denial of service (crash) via malformed data in a packet, related to lockd and the svc_xprt_received function.
5.7
2011-05-03 CVE-2011-1786 Resource Management Errors vulnerability in multiple products
lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and possibly other products, allows remote attackers to cause a denial of service (daemon crash) via an Active Directory login attempt that provides a username containing an invalid byte sequence.
network
low complexity
likewise vmware CWE-399
5.0
2011-05-03 CVE-2011-1785 Resource Management Errors vulnerability in VMWare ESX and Esxi
VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (socket exhaustion) via unspecified network traffic.
network
low complexity
vmware CWE-399
7.8
2011-05-03 CVE-2011-1604 Resource Management Errors vulnerability in Cisco Unified Communications Manager
Memory leak in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su3, 7.x before 7.1(5b)su3, 8.0 before 8.0(3a)su2, and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (memory consumption and process failure) via a malformed SIP message, aka Bug ID CSCti42904.
network
cisco CWE-399
7.1
2011-05-03 CVE-2011-1845 Resource Management Errors vulnerability in Microsoft Silverlight
Multiple memory leaks in the DataGrid control implementation in Microsoft Silverlight 4 before 4.0.60310.0 allow remote attackers to cause a denial of service (memory consumption) via an application involving (1) subscriptions to an INotifyDataErrorInfo.ErrorsChanged event or (2) a TextBlock or TextBox element.
network
low complexity
microsoft CWE-399
7.8
2011-05-03 CVE-2011-1844 Resource Management Errors vulnerability in Microsoft Silverlight
Memory leak in Microsoft Silverlight 4 before 4.0.60310.0 allows remote attackers to cause a denial of service (memory consumption) via an application involving a popup control and a custom DependencyProperty property, related to lack of garbage collection.
network
low complexity
microsoft CWE-399
7.8
2011-04-27 CVE-2011-1507 Resource Management Errors vulnerability in Digium Asterisk
Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not restrict the number of unauthenticated sessions to certain interfaces, which allows remote attackers to cause a denial of service (file descriptor exhaustion and disk space exhaustion) via a series of TCP connections.
network
low complexity
digium CWE-399
5.0
2011-04-21 CVE-2011-1821 Resource Management Errors vulnerability in IBM Tivoli Directory Server 5.2.0/5.2.0.4
IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010 on Windows allows remote authenticated users to cause a denial of service (daemon hang) via a cn=changelog search.
network
low complexity
ibm microsoft CWE-399
4.0
2011-04-21 CVE-2010-4789 Resource Management Errors vulnerability in IBM Tivoli Directory Server
Use-after-free vulnerability in the proxy-server implementation in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.65 (aka 6.0.0.8-TIV-ITDS-IF0007) and 6.3 before 6.3.0.1 (aka 6.3.0.0-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (daemon crash) via a paged search that is interrupted by an LDAP Unbind operation.
network
low complexity
ibm CWE-399
4.0
2011-04-21 CVE-2010-4787 Resource Management Errors vulnerability in IBM Tivoli Directory Server
IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.63 (aka 6.0.0.8-TIV-ITDS-IF0005) allows remote authenticated users to cause a denial of service (daemon hang) via a paged search that triggers improper mutex processing.
network
low complexity
ibm CWE-399
4.0