Vulnerabilities > Uncontrolled Resource Consumption ('Resource Exhaustion')

DATE CVE VULNERABILITY TITLE RISK
2020-07-01 CVE-2020-8663 Resource Exhaustion vulnerability in Envoyproxy Envoy
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may exhaust file descriptors and/or memory when accepting too many connections.
network
low complexity
envoyproxy CWE-400
7.5
2020-07-01 CVE-2020-12603 Resource Exhaustion vulnerability in Envoyproxy Envoy
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when proxying HTTP/2 requests or responses with many small (i.e.
network
low complexity
envoyproxy CWE-400
7.5
2020-06-30 CVE-2020-5603 Resource Exhaustion vulnerability in Mitsubishielectric products
Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver.
network
low complexity
mitsubishielectric CWE-400
7.5
2020-06-25 CVE-2020-9611 Resource Exhaustion vulnerability in Adobe Acrobat DC
Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have a stack exhaustion vulnerability.
local
low complexity
adobe CWE-400
5.5
2020-06-19 CVE-2015-9548 Resource Exhaustion vulnerability in Mattermost Server
An issue was discovered in Mattermost Server before 1.2.0.
network
low complexity
mattermost CWE-400
7.5
2020-06-19 CVE-2018-21250 Resource Exhaustion vulnerability in Mattermost Server
An issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4.
network
low complexity
mattermost CWE-400
6.5
2020-06-19 CVE-2019-20858 Resource Exhaustion vulnerability in Mattermost Server
An issue was discovered in Mattermost Server before 5.15.0.
network
low complexity
mattermost CWE-400
7.5
2020-06-18 CVE-2017-9104 Resource Exhaustion vulnerability in multiple products
An issue was discovered in adns before 1.5.2.
network
low complexity
gnu opensuse fedoraproject CWE-400
critical
9.8
2020-06-16 CVE-2020-7507 Resource Exhaustion vulnerability in Schneider-Electric Easergy T300 Firmware 1.5.2
A CWE-400: Uncontrolled Resource Consumption vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to login multiple times resulting in a denial of service.
network
low complexity
schneider-electric CWE-400
7.5
2020-06-15 CVE-2020-14152 Resource Exhaustion vulnerability in multiple products
In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption.
local
low complexity
ijg debian CWE-400
7.1