Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2016-09-06 CVE-2016-7113 Resource Management Errors vulnerability in Siemens En100 Ethernet Module Firmware 4.28
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02.
network
low complexity
siemens CWE-399
7.5
2016-09-03 CVE-2016-1415 Resource Management Errors vulnerability in Cisco Webex WRF Player T29 Sp10Base
Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted file, aka Bug ID CSCuz80455.
local
low complexity
cisco CWE-399
5.5
2016-09-02 CVE-2016-6376 Resource Management Errors vulnerability in Cisco products
The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service (device restart) via a malformed wIPS packet, aka Bug ID CSCuz40263.
low complexity
cisco CWE-399
6.5
2016-08-23 CVE-2016-6355 Resource Management Errors vulnerability in Cisco IOS XR
Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service (control-plane protocol outage) via crafted fragmented packets, aka Bug ID CSCux26791.
network
low complexity
cisco CWE-399
7.5
2016-08-08 CVE-2016-1466 Resource Management Errors vulnerability in Cisco Unified Communications Manager IM and Presence Service
Cisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7, 10.5(2) SU2, 10.5(2) SU2a, 11.0(1) SU1, and 11.5(1) allows remote attackers to cause a denial of service (sipd process restart) via crafted headers in a SIP packet, aka Bug ID CSCva39072.
network
low complexity
cisco CWE-399
7.5
2016-08-07 CVE-2016-5359 Resource Management Errors vulnerability in Wireshark
epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12 mishandles offsets, which allows remote attackers to cause a denial of service (integer overflow and infinite loop) via a crafted packet.
network
high complexity
wireshark CWE-399
5.9
2016-08-07 CVE-2016-5350 Resource Management Errors vulnerability in Wireshark
epan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles unexpected offsets, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
network
low complexity
wireshark CWE-399
7.5
2016-08-06 CVE-2016-6513 Resource Management Errors vulnerability in Wireshark
epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.
network
high complexity
wireshark CWE-399
5.9
2016-08-06 CVE-2016-6511 Resource Management Errors vulnerability in Wireshark
epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (OpenFlow dissector large loop) via a crafted packet.
network
high complexity
wireshark CWE-399
5.9
2016-08-06 CVE-2016-6508 Resource Management Errors vulnerability in Wireshark
epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (large loop) via a crafted packet.
network
high complexity
wireshark CWE-399
5.9