Vulnerabilities > Uncontrolled Resource Consumption ('Resource Exhaustion')

DATE CVE VULNERABILITY TITLE RISK
2017-07-03 CVE-2017-10800 Resource Exhaustion vulnerability in Graphicsmagick 1.3.25
When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of service (OOM) in ReadMATImage() if the size specified for a MAT Object is larger than the actual amount of data.
local
low complexity
graphicsmagick CWE-400
5.5
2017-07-03 CVE-2017-10799 Resource Exhaustion vulnerability in Graphicsmagick 1.3.25
When GraphicsMagick 1.3.25 processes a DPX image (with metadata indicating a large width) in coders/dpx.c, a denial of service (OOM) can occur in ReadDPXImage().
local
low complexity
graphicsmagick CWE-400
5.5
2017-06-30 CVE-2017-6017 Resource Exhaustion vulnerability in Schneider-Electric products
A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H.
network
low complexity
schneider-electric CWE-400
7.5
2017-06-21 CVE-2017-6043 Resource Exhaustion vulnerability in Trihedral Vtscada
A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26.
network
low complexity
trihedral CWE-400
7.5
2017-06-21 CVE-2017-9129 Resource Exhaustion vulnerability in Audiocoding Freeware Advanced Audio Coder 1.28
The wav_open_read function in frontend/input.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cause a denial of service (large loop) via a crafted wav file.
local
low complexity
audiocoding CWE-400
5.5
2017-06-19 CVE-2017-1000378 Resource Exhaustion vulnerability in Netbsd
The NetBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort() to deterministically recurse N/4 times.
network
low complexity
netbsd CWE-400
critical
9.8
2017-06-19 CVE-2017-1000373 Resource Exhaustion vulnerability in Openbsd
The OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort() to deterministically recurse N/4 times.
network
low complexity
openbsd CWE-400
6.5
2017-06-06 CVE-2016-5004 Resource Exhaustion vulnerability in Apache Ws-Xmlrpc 3.1.3
The Content-Encoding HTTP header feature in ws-xmlrpc 3.1.3 as used in Apache Archiva allows remote attackers to cause a denial of service (resource consumption) by decompressing a large file containing zeroes.
network
low complexity
apache CWE-400
6.5
2017-05-22 CVE-2017-2535 Resource Exhaustion vulnerability in Apple mac OS X
An issue was discovered in certain Apple products.
local
low complexity
apple CWE-400
7.8
2017-05-22 CVE-2017-6632 Resource Exhaustion vulnerability in Cisco Firepower Threat Defense
A vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for Cisco FirePOWER System Software 5.3.0 through 6.2.2 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high consumption of system resources.
network
low complexity
cisco CWE-400
7.5