Vulnerabilities > Uncontrolled Resource Consumption ('Resource Exhaustion')

DATE CVE VULNERABILITY TITLE RISK
2022-02-24 CVE-2022-24678 Resource Exhaustion vulnerability in Trendmicro products
An security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow an attacker to flood a temporary log location and consume all disk space on affected installations.
network
low complexity
trendmicro CWE-400
7.5
2022-02-23 CVE-2022-0476 Resource Exhaustion vulnerability in multiple products
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.
local
low complexity
radare fedoraproject CWE-400
5.5
2022-02-09 CVE-2021-0092 Resource Exhaustion vulnerability in multiple products
Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.
local
low complexity
intel netapp CWE-400
4.4
2022-02-09 CVE-2022-22543 Resource Exhaustion vulnerability in SAP Netweaver Abap and Netweaver AS Abap
SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7.22, 8.04, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, KRNL64UC 8.04, 7.22, 7.22EXT, 7.49, 7.53, KRNL64NUC 7.22, 7.22EXT, 7.49, does not sufficiently validate sap-passport information, which could lead to a Denial-of-Service attack.
network
low complexity
sap CWE-400
7.5
2022-02-09 CVE-2022-22780 Resource Exhaustion vulnerability in Zoom Meetings
The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions: Android before version 5.8.6, iOS before version 5.9.0, Linux before version 5.8.6, macOS before version 5.7.3, and Windows before version 5.6.3.
network
low complexity
zoom CWE-400
6.5
2022-02-06 CVE-2007-20001 Resource Exhaustion vulnerability in Starwindsoftware Iscsi SAN
A flaw was found in StarWind iSCSI target.
network
low complexity
starwindsoftware CWE-400
7.5
2022-02-06 CVE-2013-20004 Resource Exhaustion vulnerability in Starwindsoftware Iscsi SAN
A flaw was found in StarWind iSCSI target.
network
low complexity
starwindsoftware CWE-400
critical
9.8
2022-02-04 CVE-2022-22724 Resource Exhaustion vulnerability in Schneider-Electric products
A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service on ports 80 (HTTP) and 502 (Modbus), when sending a large number of TCP RST or FIN packets to any open TCP port of the PLC.
network
low complexity
schneider-electric CWE-400
7.5
2022-02-01 CVE-2021-43859 Resource Exhaustion vulnerability in multiple products
XStream is an open source java library to serialize objects to XML and back again.
7.5
2022-02-01 CVE-2021-46668 Resource Exhaustion vulnerability in multiple products
MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures.
local
low complexity
mariadb fedoraproject CWE-400
5.5