Vulnerabilities > Uncontrolled Resource Consumption ('Resource Exhaustion')

DATE CVE VULNERABILITY TITLE RISK
2018-01-12 CVE-2017-13211 Resource Exhaustion vulnerability in Google Android 8.0
In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated BLE scan results are received.
network
low complexity
google CWE-400
7.5
2018-01-10 CVE-2018-0004 Resource Exhaustion vulnerability in Juniper Junos
A sustained sequence of different types of normal transit traffic can trigger a high CPU consumption denial of service condition in the Junos OS register and schedule software interrupt handler subsystem when a specific command is issued to the device.
network
low complexity
juniper CWE-400
6.5
2018-01-03 CVE-2017-1000476 Resource Exhaustion vulnerability in multiple products
ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service.
network
low complexity
imagemagick debian canonical CWE-400
6.5
2017-12-29 CVE-2017-17901 Resource Exhaustion vulnerability in Zyxel P-660Hw Firmware
ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service (CPU consumption) via a flood of IP packets with a TTL of 1.
network
low complexity
zyxel CWE-400
7.5
2017-12-29 CVE-2014-3651 Resource Exhaustion vulnerability in Keycloak
JBoss KeyCloak before 1.0.3.Final allows remote attackers to cause a denial of service (resource consumption) via a large value in the size parameter to auth/qrcode, related to QR code generation.
network
low complexity
keycloak CWE-400
7.5
2017-12-14 CVE-2017-17682 Resource Exhaustion vulnerability in multiple products
In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.
network
low complexity
imagemagick debian canonical CWE-400
6.5
2017-12-13 CVE-2017-15529 Resource Exhaustion vulnerability in Symantec Norton Family
Prior to 4.4.1.10, the Norton Family Android App can be susceptible to a Denial of Service (DoS) exploit.
local
low complexity
symantec CWE-400
6.2
2017-12-05 CVE-2017-4920 Resource Exhaustion vulnerability in VMWare Nsx-V Edge
The implementation of the OSPF protocol in VMware NSX-V Edge 6.2.x prior to 6.2.8 and NSX-V Edge 6.3.x prior to 6.3.3 doesn't correctly handle the link-state advertisement (LSA).
network
high complexity
vmware CWE-400
5.9
2017-12-05 CVE-2017-17051 Resource Exhaustion vulnerability in Openstack Nova 16.0.3
An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3.
network
low complexity
openstack CWE-400
8.6
2017-12-01 CVE-2017-15701 Resource Exhaustion vulnerability in Apache Qpid Broker-J
In Apache Qpid Broker-J versions 6.1.0 through 6.1.4 (inclusive) the broker does not properly enforce a maximum frame size in AMQP 1.0 frames.
network
low complexity
apache CWE-400
7.5