The vulnerability of the `qlalloc_large_buffers()` function (drivers/net/ethernet/qlogic/qla3xxx.c) in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the qlalloclargebuffers function drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2019-16671

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Remote authenticated users can crash a device with a special packet because of Uncontrolled Resource Consumption...

Design/Logic Flaw

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Remote authenticated users can crash a device with a special packet because of Uncontrolled Resource Consumption...

CVE-2019-16671

CVE-2019-16671 affects Weidmueller IE-SW-VL05M/VL08MT/PL10M series switches. The vulnerability is described as Uncontrolled Resource Consumption that allows remote authenticated users to crash a device by sending a special packet. Red Hat and PRION entries confirm the affected device models and t...

CVE-2019-16671

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Remote authenticated users can crash a device with a special packet because of Uncontrolled Resource Consumption...

Weidmueller Industrial Ethernet Switches

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Weidmueller Equipment: Industrial Ethernet Switches Vulnerabilities: Improper Restriction of Excessive Authentication Attempts, Uncontrolled Resource Consumption, Missing Encryption of Sensitive...

Denial Of Service (DoS)

sonar-scanner-api is vulnerable to denial of serviceDoS attacks. The vulnerability exists in the ServerConnection.java class because the downloadFile function does not properly close response body, resulting in excessive resource consumption that can potentially lead to an application crash...

The vulnerability of the Apache Tomcat application server, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures when the WINDOWUPDATE message is not sent to the connection window thread 0...

MGASA-2019-0341 Updated zipios++ packages fix security vulnerability

Updated zipios++ packages fix security vulnerability: Mike Salvatore discovered that Zipios mishandled certain malformed ZIP files. An attacker could use this vulnerability to cause a denial of service or consume system resources CVE-2019-13453...

CVE-2019-6667

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.5.1-11.6.5, under certain conditions, TMM may consume excessive resources when processing traffic for a Virtual Server with the FIX Financial Information eXchange profile applied...

Design/Logic Flaw

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.5.1-11.6.5, under certain conditions, TMM may consume excessive resources when processing traffic for a Virtual Server with the FIX Financial Information eXchange profile applied...

CVE-2019-6667

CVE-2019-6667 affects F5 BIG-IP TMM when a FIX profile is used; under certain conditions, TMM can exhaust resources and cause a DoS as traffic is processed for a Virtual Server with FIX. Affected versions range from 11.5.1–15.0.1 across multiple BIG-IP lines; remediation per the advisory is to up...

EulerOS 2.0 SP8 : qt (EulerOS-SA-2019-2301)

According to the version of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.CVE-2018-19871 Note that Tenable Network Security has...

CVE-2019-6477

With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than the server has been provisioned to...

The vulnerability of the Jetty HTTP server, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Jetty HTTP server is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a malicious actor to cause service failures by sending containers containing SETTINGs, or multiple SETTINGs...

Denial Of Service (DoS)

libbind9.so is vulnerable to denial of service. The number of TCP clients that can be connected at any given time is not limited, allowing a TCP client to send a large number of DNS requests over a single connection. This results in excess resource consumption which can lead to a denial of servic...

The vulnerability of the Cisco IC3000 Industrial Compute Gateway’s software-hardware protection mechanism, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of the Cisco IC3000 Industrial Compute Gateway software and hardware solution is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures by enabling too many simultaneous sessions in the web interface...

The vulnerability of the WebVPN function in Cisco Adaptive Security Appliance and Firepower Threat Defense micro-programming systems allows a perpetrator to induce a service failure.

The vulnerability of the WebVPN function in Cisco Adaptive Security Appliance and Firepower Threat Defense microprogramming systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause a service failure by requesting the loading ...

Code injection

When the BIG-IP APM 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.4.1, or 11.5.1-11.6.5 system processes certain requests, the APD/APMD daemon may consume excessive resources...

CVE-2019-6661

CVE-2019-6661 (BIG-IP APM apd DoS) affects F5 BIG-IP APM where the apd/apmd daemon can excessively consume resources when processing certain requests. Affected versions include BIG-IP APM 14.1.0–14.1.2, 14.0.0–14.0.1, 13.1.0–13.1.3.1, 12.1.0–12.1.4.1, and 11.5.1–11.6.5. The vulnerability is mitig...