Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2016-01-11 CVE-2015-8230 Resource Management Errors vulnerability in Huawei Espace 8950 V200R003C00Spc200
Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote attackers to cause a denial of service (memory consumption and restart) via a large number of crafted ARP packets.
network
low complexity
huawei CWE-399
7.8
2016-01-08 CVE-2016-1499 Resource Management Errors vulnerability in Owncloud
ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information from a directory listing and possibly cause a denial of service (CPU consumption) via the force parameter to index.php/apps/files/ajax/scan.php.
network
low complexity
owncloud CWE-399
7.5
2016-01-06 CVE-2015-6646 Resource Management Errors vulnerability in Google Android 6.0
The System V IPC implementation in the kernel in Android before 6.0 2016-01-01 allows attackers to cause a denial of service (global kernel resource consumption) by leveraging improper interaction between IPC resource allocation and the memory manager, aka internal bug 22300191, a different vulnerability than CVE-2015-7613.
network
low complexity
google CWE-399
7.8
2016-01-05 CVE-2015-6432 Resource Management Errors vulnerability in Cisco IOS XR
Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements (PCEs) for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service (device reload) via a crafted update, aka Bug ID CSCuw83486.
network
low complexity
cisco CWE-399
5.0
2016-01-02 CVE-2015-7400 Resource Management Errors vulnerability in IBM Mashups Center 3.0.0.1
The Lotus Mashups component in IBM Mashup Center 3.0.0.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
network
low complexity
ibm CWE-399
6.8
2015-12-29 CVE-2015-7540 Resource Management Errors vulnerability in multiple products
The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory allocation, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) via crafted packets.
network
low complexity
samba canonical debian CWE-399
7.5
2015-12-29 CVE-2015-3223 Resource Management Errors vulnerability in Samba
The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a denial of service (infinite loop) via crafted packets.
network
low complexity
samba CWE-399
5.3
2015-12-23 CVE-2015-6431 Resource Management Errors vulnerability in Cisco IOS XE 16.1.1
Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405.
low complexity
cisco CWE-399
6.1
2015-12-21 CVE-2015-5001 Resource Management Errors vulnerability in IBM Websphere Portal
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and 8.5.0 before CF08 allows remote authenticated users to cause a denial of service (memory consumption) via a crafted document.
network
low complexity
ibm CWE-399
6.8
2015-12-17 CVE-2015-8341 Resource Management Errors vulnerability in XEN
The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service (memory and disk consumption) by starting domains.
network
low complexity
xen CWE-399
7.8