GHSA-H2F4-V4C4-6WX4 Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server

In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames container containing many settings, or many small SETTINGs frames. The vulnerability is due to the additional CPU and memory allocations require...

CVE-2019-5737: Uncontrolled Resource Consumption

In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service DoS by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated...

CVE-2018-12545: Uncontrolled Resource Consumption

In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames container containing many settings, or many small SETTINGs frames. The vulnerability is due to the additional CPU and memory allocations require...

CVE-2019-3874: Uncontrolled Resource Consumption

The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable...

Denial Of Service (DoS)

actionpack is vulnerable to information disclosure. A remote attacker is able crash to the application by sending malicious Accept headers that would cause the application to consume a large amount of resources...

CVE-2019-9587: Uncontrolled Resource Consumption

There is a stack consumption issue in md5Round1 located in Decrypt.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to for example the pdfimages binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impact. This is related...

Denial Of Service (DoS)

github.com/kubernetes/kubernetes is vulnerable to denial of service. A user who is authorized to make patch requests to the Kubernetes API Server can send malicious patches of type json-patch to cause the server to consume excessive amounts of resources during processing, resulting in a denial of...

PT-2019-5264

Name of the Vulnerable Software and Affected Versions Kubernetes versions prior to 1.11.8 Kubernetes versions prior to 1.12.6 Kubernetes versions prior to 1.13.4 Description The issue is related to an uncontrolled resource consumption in the Kubernetes API Server. It can be exploited by sending a...

Moxa IKS and EDS Uncontrolled Resource Consumption Vulnerability

Moxa IKS and EDS is a series of industrial switches introduced by Moxa. An uncontrolled resource consumption vulnerability exists in the Moxa IKS and EDS series. A remote authenticated attacker could exploit this vulnerability via specially crafted packets to cause a denial of service, which coul...

The vulnerability of the LibVNC library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the LibVNC library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

CVE-2019-8909

An issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service resource consumption via crafted dimensions for the verification code image...

PT-2019-19253

Name of the Vulnerable Software and Affected Versions WTCMS version 1.0 Description An issue in WTCMS allows remote attackers to cause a denial of service through resource consumption by crafting dimensions for the verification code image. Recommendations For WTCMS version 1.0, at the moment, the...

CVE-2019-8909: Uncontrolled Resource Consumption

An issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service resource consumption via crafted dimensions for the verification code image...

USN-3890-1: Django vulnerability

It was discovered that Django incorrectly handled formatting certain numbers. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service...

CVE-2019-6590

On BIG-IP LTM 13.0.0 to 13.0.1 and 12.1.0 to 12.1.3.6, under certain conditions, the TMM may consume excessive resources when processing SSL Session ID Persistence traffic...

CVE-2019-6590

CVE-2019-6590 affects BIG-IP LTM (TMM) where SSL Session ID Persistence processing can trigger excessive resource use, leading to a denial-of-service. Affected: BIG-IP LTM 13.0.0–13.0.1 and 12.1.0–12.1.3.6. Root cause: TMM resource exhaustion under certain conditions. Impact: potential memory exh...

PT-2019-18172

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM versions 12.1.0 through 12.1.3.6 F5 BIG-IP LTM versions 13.0.0 through 13.0.1 Description The issue arises under certain conditions when the Traffic Management Microkernel TMM processes SSL Session ID Persistence traffic, leading...

CVE-2019-6535: Uncontrolled Resource Consumption

Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and prior. A remote attacker can send specific bytes over Port 5007 that will result in an Ethernet...

CVE-2018-16491: Uncontrolled Resource Consumption

A prototype pollution vulnerability was found in node.extend 1.1.7, 2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype...

CVE-2018-16492: Uncontrolled Resource Consumption

A prototype pollution vulnerability was found in module extend 2.0.2, 3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype...