Vulnerabilities > Uncontrolled Resource Consumption ('Resource Exhaustion')

DATE CVE VULNERABILITY TITLE RISK
2018-08-29 CVE-2018-8005 Resource Exhaustion vulnerability in multiple products
When there are multiple ranges in a range request, Apache Traffic Server (ATS) will read the entire object from cache.
network
low complexity
apache debian CWE-400
5.3
2018-08-25 CVE-2018-15853 Resource Exhaustion vulnerability in multiple products
Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation.
local
low complexity
xkbcommon canonical CWE-400
5.5
2018-08-25 CVE-2018-15852 Resource Exhaustion vulnerability in Technicolor Tc7200.20 Firmware
Technicolor TC7200.20 devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, as demonstrated by macof.
low complexity
technicolor CWE-400
6.5
2018-08-23 CVE-2018-1157 Resource Exhaustion vulnerability in Mikrotik Routeros
Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability.
network
low complexity
mikrotik CWE-400
6.5
2018-08-21 CVE-2018-15671 Resource Exhaustion vulnerability in Hdfgroup Hdf5 1.10.2
An issue was discovered in the HDF HDF5 1.10.2 library.
network
low complexity
hdfgroup CWE-400
6.5
2018-08-21 CVE-2018-15607 Resource Exhaustion vulnerability in Imagemagick 7.0.811
In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails.
network
low complexity
imagemagick CWE-400
6.5
2018-08-20 CVE-2018-5243 Resource Exhaustion vulnerability in Symantec Encryption Management Server
The Symantec Encryption Management Server (SEMS) product, prior to version 3.4.2 MP1, may be susceptible to a denial of service (DoS) exploit.
network
low complexity
symantec CWE-400
7.5
2018-08-17 CVE-2018-15470 Resource Exhaustion vulnerability in XEN
An issue was discovered in Xen through 4.11.x.
local
low complexity
xen CWE-400
6.5
2018-08-17 CVE-2018-15469 Resource Exhaustion vulnerability in multiple products
An issue was discovered in Xen through 4.11.x.
local
low complexity
xen debian CWE-400
6.5
2018-08-16 CVE-2016-9596 Resource Exhaustion vulnerability in multiple products
libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document.
network
low complexity
redhat xmlsoft CWE-400
6.5