Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2011-03-29 CVE-2010-1675 Resource Management Errors vulnerability in Quagga
bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service (session reset) via a malformed AS_PATHLIMIT path attribute.
network
low complexity
quagga CWE-399
5.0
2011-03-22 CVE-2011-0331 Resource Management Errors vulnerability in Honeywell Scanserver Activex Control 780.0.20.5
Use-after-free vulnerability in the addOSPLext method in the Honeywell ScanServer ActiveX control 780.0.20.5 allows remote attackers to execute arbitrary code via a crafted HTML document.
network
honeywell CWE-399
critical
9.3
2011-03-22 CVE-2009-5062 Resource Management Errors vulnerability in IBM Lotus Quickr 8.1
IBM Lotus Quickr 8.1 before 8.1.0.15 services for Lotus Domino on AIX allows remote authenticated users to cause a denial of service (daemon crash) by subscribing to an Atom feed, aka SPR JRIE7VKMP9.
network
ibm CWE-399
3.5
2011-03-22 CVE-2008-7284 Resource Management Errors vulnerability in IBM Lotus Quickr 8.1
IBM Lotus Quickr 8.1 before 8100.003 services for Lotus Domino allows remote authenticated users to cause a denial of service (daemon crash) by clicking a download link, aka SPR QCAO7E6AM8.
network
ibm CWE-399
3.5
2011-03-20 CVE-2011-1468 Resource Management Errors vulnerability in PHP
Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.
network
php CWE-399
4.3
2011-03-20 CVE-2011-1081 Resource Management Errors vulnerability in Openldap
modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service (daemon crash) via a relative Distinguished Name (DN) modification request (aka MODRDN operation) that contains an empty value for the OldDN field.
network
low complexity
openldap CWE-399
5.0
2011-03-20 CVE-2011-0284 Resource Management Errors vulnerability in MIT Kerberos 5
Double free vulnerability in the prepare_error_as function in do_as_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an e_data field containing typed data.
network
high complexity
mit CWE-399
7.6
2011-03-18 CVE-2011-1148 Resource Management Errors vulnerability in PHP
Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments.
network
low complexity
php CWE-399
7.5
2011-03-10 CVE-2011-1344 Resource Management Errors vulnerability in Apple Safari
Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 (CDMA); and possibly other products allows remote attackers to execute arbitrary code by adding children to a WBR tag and then removing the tag, related to text nodes, as demonstrated by Chaouki Bekrar during a Pwn2Own competition at CanSecWest 2011.
network
apple CWE-399
6.8
2011-03-08 CVE-2011-1322 Resource Management Errors vulnerability in IBM Websphere Application Server
The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via encrypted SOAP messages.
network
low complexity
ibm CWE-399
5.0