Vulnerabilities > Uncontrolled Resource Consumption ('Resource Exhaustion')

DATE CVE VULNERABILITY TITLE RISK
2022-10-17 CVE-2022-2455 Resource Exhaustion vulnerability in Gitlab
A business logic issue in the handling of large repositories in all versions of GitLab CE/EE from 10.0 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2 allowed an authenticated and authorized user to exhaust server resources by importing a malicious project.
network
low complexity
gitlab CWE-400
6.5
2022-10-17 CVE-2022-2931 Resource Exhaustion vulnerability in Gitlab
A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2.
network
low complexity
gitlab CWE-400
7.5
2022-10-17 CVE-2022-3283 Resource Exhaustion vulnerability in Gitlab
A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 While cloning an issue with special crafted content added to the description could have been used to trigger high CPU usage.
network
low complexity
gitlab CWE-400
7.5
2022-10-11 CVE-2022-20425 Resource Exhaustion vulnerability in Google Android
In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent degradation of performance due to resource exhaustion.
local
low complexity
google CWE-400
5.5
2022-09-30 CVE-2022-2529 Resource Exhaustion vulnerability in Cloudflare Goflow
sflow decode package does not employ sufficient packet sanitisation which can lead to a denial of service attack.
network
low complexity
cloudflare CWE-400
7.5
2022-09-26 CVE-2022-3204 Resource Exhaustion vulnerability in multiple products
A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software.
network
low complexity
nlnetlabs fedoraproject CWE-400
7.5
2022-09-06 CVE-2022-35913 Resource Exhaustion vulnerability in Kayako Samourai 0.99.98E
Samourai Wallet Stonewallx2 0.99.98e allows a denial of service via a P2P coinjoin.
network
low complexity
kayako CWE-400
4.3
2022-09-02 CVE-2020-29260 Resource Exhaustion vulnerability in multiple products
libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
network
low complexity
libvncserver-project debian CWE-400
7.5
2022-09-02 CVE-2022-22101 Resource Exhaustion vulnerability in Qualcomm products
Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto
local
low complexity
qualcomm CWE-400
5.5
2022-09-02 CVE-2022-39194 Resource Exhaustion vulnerability in Mediawiki
An issue was discovered in the MediaWiki through 1.38.2.
network
low complexity
mediawiki CWE-400
4.9