Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2011-01-11 CVE-2010-3679 Resource Management Errors vulnerability in multiple products
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.
network
low complexity
mysql oracle CWE-399
4.0
2011-01-11 CVE-2010-3678 Resource Management Errors vulnerability in multiple products
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are explicitly specified or indirectly provided by the WITH ROLLUP modifier.
network
low complexity
mysql oracle CWE-399
4.0
2011-01-11 CVE-2010-3677 Resource Management Errors vulnerability in multiple products
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a join query that uses a table with a unique SET column.
network
low complexity
mysql oracle CWE-399
4.0
2011-01-07 CVE-2009-5040 Resource Management Errors vulnerability in Cisco IOS
CallManager Express (CME) on Cisco IOS before 15.0(1)XA allows remote authenticated users to cause a denial of service (device crash) by using an extension mobility (EM) phone to interact with the menu for SNR number changes, aka Bug ID CSCta63555.
network
low complexity
cisco CWE-399
6.8
2011-01-07 CVE-2010-4669 Resource Management Errors vulnerability in Microsoft products
The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service (CPU consumption and system hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package.
network
low complexity
microsoft CWE-399
7.8
2010-12-30 CVE-2010-4623 Resource Management Errors vulnerability in IBM Tivoli Access Manager for E-Business 6.1.1
WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service (worker thread consumption) via shift-reload actions.
network
low complexity
ibm CWE-399
4.0
2010-12-30 CVE-2010-4352 Resource Management Errors vulnerability in D-Bus Project D-Bus
Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.
local
low complexity
d-bus-project CWE-399
2.1
2010-12-30 CVE-2010-4161 Resource Management Errors vulnerability in multiple products
The udp_queue_rcv_skb function in net/ipv4/udp.c in a certain Red Hat build of the Linux kernel 2.6.18 in Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (deadlock and system hang) by sending UDP traffic to a socket that has a crafted socket filter, a related issue to CVE-2010-4158.
local
low complexity
linux redhat CWE-399
4.9
2010-12-22 CVE-2010-4594 Resource Management Errors vulnerability in IBM Lotus Mobile Connect
The Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly process TCP connection requests, which allows remote attackers to cause a denial of service (memory consumption and HTTP-AS hang) by making many connection requests that trigger "queue size delta errors," related to a "timing hole" issue.
network
ibm CWE-399
4.3
2010-12-22 CVE-2010-4593 Resource Management Errors vulnerability in IBM Lotus Mobile Connect
The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 does not properly maintain a certain reference count, which allows remote authenticated users to cause a denial of service (IP address exhaustion) by making invalid attempts to establish sessions with the same VPN ID from multiple devices.
network
low complexity
ibm CWE-399
4.0