Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2016-07-11 CVE-2016-3765 Resource Management Errors vulnerability in Google Android 6.0/6.0.1
decoder/impeg2d_bitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted application, aka internal bug 28168413.
local
low complexity
google CWE-399
7.7
2016-07-11 CVE-2016-3754 Resource Management Errors vulnerability in Google Android
mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28615448.
network
low complexity
google CWE-399
7.5
2016-07-06 CVE-2016-1546 Resource Management Errors vulnerability in Apache Http Server 2.4.17/2.4.18
The Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of simultaneous stream workers for a single HTTP/2 connection, which allows remote attackers to cause a denial of service (stream-processing outage) via modified flow-control windows.
network
high complexity
apache CWE-399
5.9
2016-07-03 CVE-2016-5706 Resource Management Errors vulnerability in multiple products
js/get_scripts.js.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to cause a denial of service via a large array in the scripts parameter.
network
low complexity
phpmyadmin opensuse CWE-399
7.5
2016-07-02 CVE-2016-1440 Resource Management Errors vulnerability in Cisco web Security Appliance
The proxy process on Cisco Web Security Appliance (WSA) devices through 9.1.0-070 allows remote attackers to cause a denial of service (CPU consumption) by establishing an FTP session and then improperly terminating the control connection after a file transfer, aka Bug ID CSCuy43468.
network
low complexity
cisco CWE-399
5.3
2016-06-30 CVE-2016-5368 Resource Management Errors vulnerability in Huawei Ar3200 Firmware V200R005C20/V200R005C32/V200R007C00
Memory leak in Huawei AR3200 before V200R007C00SPC900 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted Multiprotocol Label Switching (MPLS) packets.
network
low complexity
huawei CWE-399
7.5
2016-06-30 CVE-2016-4057 Resource Management Errors vulnerability in Huawei Fusioncompute V100R005C00
Huawei FusionCompute before V100R005C10SPC700 allows remote authenticated users to cause a denial of service (resource consumption) via a large number of crafted packets.
network
low complexity
huawei CWE-399
6.5
2016-06-29 CVE-2016-0260 Resource Management Errors vulnerability in IBM Websphere MQ
Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers to cause a denial of service (heap memory consumption) by triggering many errors.
network
low complexity
ibm CWE-399
7.5
2016-06-27 CVE-2016-3949 Resource Management Errors vulnerability in Siemens products
Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CPU devices with firmware before 3.3.12 allow remote attackers to cause a denial of service (defect-mode transition) via crafted (1) ISO-TSAP or (2) Profibus packets.
network
low complexity
siemens CWE-399
7.5
2016-06-24 CVE-2016-5435 Resource Management Errors vulnerability in Huawei Firmware V5500R001C00
Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 before V500R001C20SPC100, when in hot standby networking where two devices are not directly connected, allows remote attackers to cause a denial of service (memory consumption and reboot) via a crafted packet.
network
high complexity
huawei CWE-399
5.9