Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2016-07-17 CVE-2016-1459 Resource Management Errors vulnerability in Cisco IOS and IOS XE
Cisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated users to cause a denial of service (device reload) via crafted attributes in a BGP message, aka Bug ID CSCuz21061.
network
high complexity
cisco CWE-399
4.9
2016-07-15 CVE-2016-1426 Resource Management Errors vulnerability in Cisco IOS XR
Cisco IOS XR 5.x through 5.2.5 on NCS 6000 devices allows remote attackers to cause a denial of service (timer consumption and Route Processor reload) via crafted SSH traffic, aka Bug ID CSCux76819.
network
low complexity
cisco CWE-399
7.8
2016-07-11 CVE-2016-3767 Resource Management Errors vulnerability in Google Android
The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28169363 and MediaTek internal bug ALPS02689526.
network
google CWE-399
critical
9.3
2016-07-11 CVE-2016-3765 Resource Management Errors vulnerability in Google Android 6.0/6.0.1
decoder/impeg2d_bitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted application, aka internal bug 28168413.
network
low complexity
google CWE-399
6.4
2016-07-11 CVE-2016-3754 Resource Management Errors vulnerability in Google Android
mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28615448.
network
low complexity
google CWE-399
7.8
2016-07-06 CVE-2016-1546 Resource Management Errors vulnerability in Apache Http Server 2.4.17/2.4.18
The Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of simultaneous stream workers for a single HTTP/2 connection, which allows remote attackers to cause a denial of service (stream-processing outage) via modified flow-control windows.
network
high complexity
apache CWE-399
5.9
2016-07-03 CVE-2016-5706 Resource Management Errors vulnerability in multiple products
js/get_scripts.js.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to cause a denial of service via a large array in the scripts parameter.
network
low complexity
phpmyadmin opensuse CWE-399
5.0
2016-07-02 CVE-2016-1440 Resource Management Errors vulnerability in Cisco web Security Appliance
The proxy process on Cisco Web Security Appliance (WSA) devices through 9.1.0-070 allows remote attackers to cause a denial of service (CPU consumption) by establishing an FTP session and then improperly terminating the control connection after a file transfer, aka Bug ID CSCuy43468.
network
low complexity
cisco CWE-399
5.0
2016-06-30 CVE-2016-5368 Resource Management Errors vulnerability in Huawei Ar3200 Firmware V200R005C20/V200R005C32/V200R007C00
Memory leak in Huawei AR3200 before V200R007C00SPC900 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted Multiprotocol Label Switching (MPLS) packets.
network
low complexity
huawei CWE-399
7.8
2016-06-30 CVE-2016-4057 Resource Management Errors vulnerability in Huawei Fusioncompute V100R005C00
Huawei FusionCompute before V100R005C10SPC700 allows remote authenticated users to cause a denial of service (resource consumption) via a large number of crafted packets.
network
low complexity
huawei CWE-399
6.8