Vulnerabilities > Uncontrolled Resource Consumption ('Resource Exhaustion')

DATE CVE VULNERABILITY TITLE RISK
2019-05-03 CVE-2019-1696 Resource Exhaustion vulnerability in Cisco products
Multiple vulnerabilities in the Server Message Block (SMB) Protocol preprocessor detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, adjacent or remote attacker to cause a denial of service (DoS) condition.
low complexity
cisco CWE-400
3.3
2019-05-03 CVE-2018-15388 Resource Exhaustion vulnerability in Cisco Adaptive Security Appliance Software
A vulnerability in the WebVPN login process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device.
network
low complexity
cisco CWE-400
8.6
2019-05-01 CVE-2019-10952 Resource Exhaustion vulnerability in Rockwellautomation products
An attacker could send a crafted HTTP/HTTPS request to render the web server unavailable and/or lead to remote code execution caused by a stack-based buffer overflow vulnerability.
network
low complexity
rockwellautomation CWE-400
critical
9.8
2019-04-30 CVE-2019-10948 Resource Exhaustion vulnerability in Fujifilm products
Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X are susceptible to a denial-of-service condition as a result of an overflow of TCP packets, which requires the device to be manually rebooted.
network
low complexity
fujifilm CWE-400
7.8
2019-04-23 CVE-2019-2602 Resource Exhaustion vulnerability in multiple products
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
7.5
2019-04-23 CVE-2019-11470 Resource Exhaustion vulnerability in Imagemagick 7.0.826
The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled resource consumption) by crafting a Cineon image with an incorrect claimed image size.
network
low complexity
imagemagick CWE-400
6.5
2019-04-23 CVE-2013-7470 Resource Exhaustion vulnerability in Linux Kernel
cipso_v4_validate in include/net/cipso_ipv4.h in the Linux kernel before 3.11.7, when CONFIG_NETLABEL is disabled, allows attackers to cause a denial of service (infinite loop and crash), as demonstrated by icmpsic, a different vulnerability than CVE-2013-0310.
network
linux CWE-400
7.1
2019-04-21 CVE-2019-11391 Resource Exhaustion vulnerability in Modsecurity Owasp Modsecurity Core Rule SET 3.0.0/3.0.2/3.1.0
An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0.
network
low complexity
modsecurity CWE-400
5.3
2019-04-21 CVE-2019-11390 Resource Exhaustion vulnerability in Modsecurity Owasp Modsecurity Core Rule SET 3.0.0/3.0.2/3.1.0
An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0.
network
low complexity
modsecurity CWE-400
5.3
2019-04-21 CVE-2019-11389 Resource Exhaustion vulnerability in Modsecurity Owasp Modsecurity Core Rule SET 3.0.0/3.0.2/3.1.0
An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) through 3.1.0.
network
low complexity
modsecurity CWE-400
5.3