Siemens SCALANCE X-200RNA Switch Devices Resource Management Errors (CVE-2015-1788)

The BNGF2mmodinv function in crypto/bn/bngf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a...

Siemens SCALANCE X-200RNA Switch Devices Resource Management Errors (CVE-2015-1792)

The dofreeupto function in crypto/cms/cmssmime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service infinite loop via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an...

Siemens SCALANCE X-200RNA Switch Devices Resource Management Errors (CVE-2016-2109)

The asn1d2ireadbio function in crypto/asn1/ad2ifp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service memory consumption via a short invalid encoding. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE X-200RNA Switch Devices Resource Management Errors (CVE-2016-6308)

statem/statemdtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service memory consumption via crafted DTLS messages. This plugin only works with Tenable.ot. Please visi...

Siemens SCALANCE X-200RNA Switch Devices Resource Management Errors (CVE-2016-8858)

DISPUTED The kexinputkexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service memory consumption by sending many duplicate KEXINIT requests. NOTE: a third party reports that OpenSSH upstream does not consider this as a security issue. This...

Siemens SCALANCE X-200RNA Switch Devices Resource Management Errors (CVE-2016-0798)

Memory leak in the SRPVBASEgetbyuser implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service memory consumption by providing an invalid username in a connection attempt, related to apps/sserver.c and crypto/srp/srpvfy.c. This plug...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a resource management error vulnerability that stems from an SST write failure, which could lead to a kernel crash. The vulnerability can be exploited...

The vulnerabilities of the functions ocfs2_extend_trans() and ocfs2_dio_end_io_write() in the cluster file system OCFS2 of the Linux operating system allow a hacker to cause a service failure.

The vulnerabilities of the ocfs2extendtrans and ocfs2dioendiowrite functions in the OCFS2 cluster file system of the Linux operating system are related to resource management errors. Exploiting these vulnerabilities can allow an attacker to cause service failures...

The vulnerability of the functions ili9881c_prepare() and ili9881c_unprepare() in the driver (drivers/gpu/drm/panel/panel-ilitek-ili9881c.c) of the Linux kernel allows a hacker to induce a service failure.

The vulnerability of the functions ili9881cprepare and ili9881cunprepare in the driver drivers/gpu/drm/panel/panel-ilitek-ili9881c.c of the Linux kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the cxacru_bind() function in the USB driver (drivers/usb/atm/cxacru.c) of the Linux kernel allows a hacker to induce a service failure.

The vulnerability of the cxacrubind function in the USB driver drivers/usb/atm/cxacru.c of the Linux kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in the Linux kernel that stems from a device not being properly freed when destroying a network namespace, which could lead to...

Uncontrolled Memory Consumption in `SimpleDirectoryReader` Due to Post-Limit File Processing

Description Summary: The SimpleDirectoryReader component in llamaindex.core contains a resource management flaw where user-specified file limits numfileslimit are applied after fully enumerating and loading all discovered files into memory. This design causes uncontrolled memory consumption and...

Microsoft Streaming Service 资源管理错误漏洞

Microsoft Streaming Service is a video platform from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Streaming Service. An attacker could exploit this vulnerability to elevate privileges. The following products and editions are affected:Windows 10 Version...

Adobe Acrobat Reader 资源管理错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. A resource management error vulnerability exists in Adobe Acrobat Reader 24.001.30225, 20.005.30748, 25.001.20428 and earlier versions, which stems from a reuse aft...

Microsoft Local Security Authority Server 资源管理错误漏洞

Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Local Security Authority Server. An attacker could exploit the vulnerability to elevate privileges. The following products and...

Microsoft Word 资源管理错误漏洞

Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Office 资源管理错误漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Common components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to...

Microsoft Win32k 资源管理错误漏洞

Microsoft Win32k is a system file for Windows multi-user administration by Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Win32k. An attacker exploiting this vulnerability could elevate privileges. The following products and editions are affected:Windows ...

Microsoft Excel 资源管理错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

Siemens Teamcenter 资源管理错误漏洞

Siemens Teamcenter Visualization is software that provides teamwork capabilities for designing 2D and 3D scenarios. The software simplifies the engineering and manufacturing process by creating virtual prototypes from a variety of mechanical computer-aided design MCAD formats.Siemens Tecnomatix...