CVE-2023-6180

The CVE-2023-6180 issue affects the tokio-boring library v4.0.0, where set_ex_data does not deallocate memory after completing a TLS connection, causing a memory leak and potential DoS via resource exhaustion as connections accumulate. The practical impact is increased resource usage per TLS hand...

CVE-2023-6180 Resource exhaustion via memory leak in tokio-boring

The tokio-boring library in version 4.0.0 is affected by a memory leak issue that can lead to excessive resource consumption and potential DoS by resource exhaustion. The setexdata function used by the library did not deallocate memory used by pre-existing data in memory each time after completin...

CVE-2023-39248

Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption Denial of Service vulnerability, when switches are configured with VLT and VRRP. A remote unauthenticated user can cause the network to be flooded leading to Denial of Service for actual network...

Design/Logic Flaw

Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption Denial of Service vulnerability, when switches are configured with VLT and VRRP. A remote unauthenticated user can cause the network to be flooded leading to Denial of Service for actual network...

CVE-2023-39248

Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption Denial of Service vulnerability, when switches are configured with VLT and VRRP. A remote unauthenticated user can cause the network to be flooded leading to Denial of Service for actual network...

CVE-2023-39248

Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption Denial of Service vulnerability, when switches are configured with VLT and VRRP. A remote unauthenticated user can cause the network to be flooded leading to Denial of Service for actual network...

CVE-2023-39248

Dell OS10 Networking Switches running 10.5.2.x and above are affected by an Uncontrolled Resource Consumption (Denial of Service) vulnerability when VLT and VRRP are configured. A remote unauthenticated attacker can flood the network, causing outages for legitimate users. Impact is high availabil...

CVE-2023-47633 Uncontrolled Resource Consumption in Traefik

Traefik is an open source HTTP reverse proxy and load balancer. The traefik docker container uses 100% CPU when it serves as its own backend, which is an automatically generated route resulting from the Docker integration in the default configuration. This issue has been addressed in versions...

SUSE-SU-2023:4631-1 Security update for python-Pillow

This update for python-Pillow fixes the following issues: - CVE-2023-44271: Fixed uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument bsc1216894...

SUSE-SU-2023:4630-1 Security update for python-Pillow

This update for python-Pillow fixes the following issues: - CVE-2023-44271: Fixed uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument bsc1216894...

CVE-2023-5915

A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corporation. This vulnerability may allow to a remote attacker to cause a denial-of-service condition to the FCN/FCJ controller by sending a crafted packet. While sending the packet,...

CVE-2023-4912 Allocation of Resources Without Limits or Throttling in GitLab

An issue has been discovered in GitLab EE affecting all versions starting from 10.5 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to cause a client-side denial of service using malicious crafted mermaid...

CVE-2023-5915

CVE-2023-5915 affects Yokogawa STARDOM FCN/FCJ controllers (versions R1.01–R4.31). The root cause is an Uncontrolled Resource Consumption condition that allows a remote attacker to cause a denial-of-service by sending crafted packets, which can render the maintenance homepage unusable (changing c...

PT-2023-7414 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, 11.5 Description: The issue is related to an uncontrolled consumption of resources, which can lead to a denial of service under extreme stress conditions. Th...

Yokogawa STARDOM

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Yokogawa Equipment : STARDOM FCN/FCJ Vulnerability : Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker to cause...

The vulnerability of the Cisco AnyConnect VPN client software, which is part of the Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) network devices, allows a attacker to cause a service outage.

The vulnerability of the Cisco AnyConnect VPN client software, which is part of the Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD systems, is related to an uncontrolled resource consumption during HTTPS requests processing. Exploiting this vulnerability can allow a...

Fedora 37 : golang-github-google-dap (2023-c858d2c53b)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-c858d2c53b advisory. Update to go-dap 0.11 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 39 : golang-github-google-dap (2023-fa2ec3d3e0)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-fa2ec3d3e0 advisory. Update to go-dap 0.11 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 38 : golang-github-google-dap (2023-548163deb1)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-548163deb1 advisory. Update to go-dap 0.11 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

python-werkzeug: high resource consumption leading to denial of service

A resource consumption flaw was found in python-werkzeug. If a specially crafted file is uploaded by a remote attacker, it may cause a denial of service...