Vulnerabilities > Uncontrolled Resource Consumption ('Resource Exhaustion')

DATE CVE VULNERABILITY TITLE RISK
2018-07-24 CVE-2018-10608 Resource Exhaustion vulnerability in Selinc Acselerator Architect 2.2.24.0
SEL AcSELerator Architect version 2.2.24.0 and prior can be exploited when the AcSELerator Architect FTP client connects to a malicious FTP server, which may cause denial of service via 100% CPU utilization.
network
low complexity
selinc CWE-400
7.5
2018-07-18 CVE-2018-0372 Resource Exhaustion vulnerability in Cisco Nx-Os 13.0(1K)
A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastructure (ACI) Mode could allow an unauthenticated, remote attacker to cause the device to run low on system memory, which could result in a Denial of Service (DoS) condition on an affected system.
network
low complexity
cisco CWE-400
7.5
2018-07-11 CVE-2018-0031 Resource Exhaustion vulnerability in Juniper Junos
Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter.
network
high complexity
juniper CWE-400
5.9
2018-07-11 CVE-2018-0030 Resource Exhaustion vulnerability in Juniper Junos
Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) line cards or PTX1K to crash and restart.
network
low complexity
juniper CWE-400
7.5
2018-07-11 CVE-2018-0029 Resource Exhaustion vulnerability in Juniper Junos
While experiencing a broadcast storm, placing the fxp0 interface into promiscuous mode via the 'monitor traffic interface fxp0' can cause the system to crash and restart (vmcore).
low complexity
juniper CWE-400
6.5
2018-07-05 CVE-2016-10724 Resource Exhaustion vulnerability in Bitcoin Core
Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote network alert system (deprecated since Q1 2016) if an attacker can sign a message with a certain private key that had been known by unintended actors, because of an infinitely sized map.
network
low complexity
bitcoin CWE-400
7.5
2018-07-05 CVE-2018-13251 Resource Exhaustion vulnerability in Libming 0.4.8
In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, related to parseSWF_DEFINEBITSJPEG2.
network
low complexity
libming CWE-400
6.5
2018-06-26 CVE-2018-1000518 Resource Exhaustion vulnerability in Websockets Project Websockets 4.0
aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion.
network
low complexity
websockets-project CWE-400
7.5
2018-06-22 CVE-2018-12641 Resource Exhaustion vulnerability in GNU Binutils 2.30
An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30.
local
low complexity
gnu CWE-400
5.5
2018-06-21 CVE-2018-0309 Resource Exhaustion vulnerability in Cisco Nx-Os 7.0(3)I5(2)/7.0(3)I6(1)
A vulnerability in the implementation of a specific CLI command and the associated Simple Network Management Protocol (SNMP) MIB for Cisco NX-OS (in standalone NX-OS mode) on Cisco Nexus 3000 and 9000 Series Switches could allow an authenticated, remote attacker to exhaust system memory on an affected device, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-400
7.7