Vulnerabilities > Uncontrolled Resource Consumption ('Resource Exhaustion')

DATE CVE VULNERABILITY TITLE RISK
2017-04-03 CVE-2017-7397 Resource Exhaustion vulnerability in Backbox Linux 4.6
BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd CPU consumption) via a flood of packets with Martian source IP addresses (as defined in RFC 1812 section 5.3.7).
network
low complexity
backbox CWE-400
7.5
2017-04-02 CVE-2016-8780 Resource Exhaustion vulnerability in Huawei products
Huawei CloudEngine 6800 V100R006C00, CloudEngine 7800 V100R006C00, CloudEngine 8800 V100R006C00, and CloudEngine 12800 V100R006C00 allow remote attackers with specific permission to store massive files to exhaust the shared storage space, leading to a DoS condition.
network
low complexity
huawei CWE-400
6.5
2017-04-02 CVE-2017-2461 Resource Exhaustion vulnerability in Apple products
An issue was discovered in certain Apple products.
network
low complexity
apple CWE-400
7.5
2017-03-29 CVE-2017-7285 Resource Exhaustion vulnerability in Mikrotik Routeros 6.38.5
A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of TCP RST packets, preventing the affected router from accepting new TCP connections.
network
low complexity
mikrotik CWE-400
7.5
2017-03-24 CVE-2016-2225 Resource Exhaustion vulnerability in Uclibc-Ng Project Uclibc-Ng
The __read_etc_hosts_r function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (infinite loop) via a crafted packet.
network
low complexity
uclibc-ng-project CWE-400
7.5
2017-03-24 CVE-2016-2224 Resource Exhaustion vulnerability in Uclibc-Ng Project Uclibc-Ng
The __decode_dotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (infinite loop) via vectors involving compressed items in a reply.
network
low complexity
uclibc-ng-project CWE-400
7.5
2017-03-23 CVE-2016-10058 Resource Exhaustion vulnerability in Imagemagick
Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick before 6.9.6-3 allows remote attackers to cause a denial of service (memory consumption) via a crafted image file.
local
low complexity
imagemagick CWE-400
5.5
2017-03-23 CVE-2016-10047 Resource Exhaustion vulnerability in Imagemagick
Memory leak in the NewXMLTree function in magick/xml-tree.c in ImageMagick before 6.9.4-7 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML file.
local
low complexity
imagemagick CWE-400
5.5
2017-03-22 CVE-2017-3857 Resource Exhaustion vulnerability in Cisco IOS
A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco IOS XE (3.1 through 3.18) could allow an unauthenticated, remote attacker to cause an affected device to reload.
network
low complexity
cisco CWE-400
7.5
2017-03-22 CVE-2017-3856 Resource Exhaustion vulnerability in Cisco IOS XE
A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attacker to cause an affected device to reload.
network
low complexity
cisco CWE-400
7.5