Cesanta Mongoose Embedded Web Server Library Resource Management Error Vulnerability (CNVD-2019-22655)

Cesanta Mongoose Embedded Web Server Library is a cross-platform embedded server and web library written in C. It is designed to be used with a wide range of applications, including... A resource management error vulnerability exists in the 'mgcgievhandler' function of the mongoose.c file in...

Google Chrome Download Manager Memory Misreference Vulnerability

Google Chrome is a web browser from Google Inc. and Download Manager is one of the download managers. A security vulnerability exists in Download Manager in versions of Google Chrome prior to 75.0.3770.80. The vulnerability arises from improper management of system resources e.g., memory, disk...

Partner Perspectives: 3 Tips for Starting a Threat Hunting Program

Peter Silberman is the Director of Detection & Response, Innovation at Expel. Mary Singh is a Detection and Response Lead at Expel. So, you want to build a threat hunting program…but where do you start? There are lots of ways to build a threat hunting program for your own org and depending on you...

Google Chrome ServiceWorker Resource Management Error Vulnerability

Google Chrome is a web browser from Google, and ServiceWorker is one of the backend messaging components. A resource management error vulnerability exists in ServiceWorker in versions of Google Chrome prior to 75.0.3770.80. The vulnerability stems from the mismanagement of system resources e.g.,...

The vulnerability of the Simple Network Management Protocol implementation in microprogrammed network devices from Cisco Catalyst allows a intruder to cause service interruptions.

The vulnerability of the Simple Network Management Protocol SNMP implementation in Cisco Catalyst network devices is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger maintenance failures through a specially crafted request...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Identity Services Engine’s web interface is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted requests...

The vulnerability in the t1_lib.c file of the OpenSSL library allows a hacker to induce a service failure.

The vulnerability in the t1lib.c file of the OpenSSL library is related to resource management errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure by using large OCSP Status Request requests...

Libwebp Resource Management Error Vulnerability

Libwebp is a WebP image format encoding and decoding library . A resource management error vulnerability exists in libwebpmux in Libwebp version 0.5.1. The vulnerability arises from mismanagement of system resources e.g., memory, disk space, files, etc. by a network system or product. No detailed...

Schneider Electric Modbus Serial Driver Resource Management Error Vulnerability

Schneider Electric Modbus Serial Driver is a serial driver from Schneider Electric France. A resource management error vulnerability exists in the Schneider Electric Modbus Serial Driver. An attacker could exploit this vulnerability to perform write operations to system files or other critical us...

The vulnerability of the fxp0 interface implementation in the Junos operating system, which allows a intruder to cause a service failure.

The vulnerability of the fxp0 interface implementation in the Junos operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Multiple Qualcomm Products Resource Management Error Vulnerability (CNVD-2019-16543)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.MDM9640 is a central processing unit CPU product. A resource management error vulnerability exists in multiple Qualcomm products. The...

Multiple Schneider Electric Products Resource Management Error Vulnerability

The Schneider Electric Modicon M580 is a programmable automation controller.The Schneider Electric Modicon Premium is a large programmable logic controller PLC for discrete or process applications.The Schneider Electric Modicon Quantum is a large programmable logic controller PLC for process...

Mozilla Firefox and Mozilla Firefox ESR crash generation server resource management error vulnerability

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation.Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. crash generation server is one of the crash information generation servers. A resource...

Mozilla Firefox and Mozilla Firefox ESR Resource Management Error Vulnerability

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A resource management error vulnerability exists in Mozilla Firefox versions pri...

FreeImage Resource Management Error Vulnerability

FreeImage is a cross-platform open source library for supporting popular graphic image formats. When FreeImage 3.18.0 reads special TIFF files, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, causing the stack to run out...

MiniUPnP MiniSSDPd Resource Management Error Vulnerability

MiniSSDPd is a daemon for managing SSDPs on Posix systems. A resource management error vulnerability exists in the 'updateDevice' function of the minissdpd.c file in MiniUPnP MiniSSDPd versions 1.4 and 1.5. The vulnerability stems from the mismanagement of system resources e.g., memory, disk spac...

The vulnerability of the call processing function in Cisco IP Phone models 7800 and 8800 allows a intruder to cause a service failure.

The vulnerability of the call processing function in Cisco IP Phone models 7800 and 8800 is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted SIP packet to the vulnerable phone...

The vulnerability of Cisco Firepower Threat Defense’s microprogramming software, related to resource management errors, allows attackers to trigger a service failure.

The vulnerability of Cisco Firepower Threat Defense’s microprogramming software is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by creating a persistent TCP traffic on ports 22 or 443...

ImageWorsener Resource Management Error Vulnerability

ImageWorsener is a set of image scaling and processing utilities. A resource management error vulnerability exists in the 'iwgifinitscreen' function of the imagew-gif.c file in ImageWorsener version 1.3.2. The vulnerability stems from mismanagement of system resources e.g., memory, disk space,...

ImageMagick Studio ImageMagick Resource Management Error Vulnerability

ImageMagick Studio ImageMagick is a suite of open-source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. ImageMagick Studio A resource management error vulnerability exists in the 'ReadTIFFImage'...