PT-2017-1041

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0 Description The issue is related to resource management errors in the media server service of the Android operating system. It may allow a remote attacker to cause a device hang or reboot...

PT-2017-4103

Name of the Vulnerable Software and Affected Versions python priority library versions prior to 1.2.0 Description The issue is related to a resource management error in the python priority library. A malicious peer can exploit this by assigning priority information for every possible HTTP/2 strea...

Resource Management Errors

Overview Affected versions of this package are vulnerable to Resource Management Errors. DISPUTED The kexinputkexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service memory consumption by sending many duplicate KEXINIT requests. NOTE: a...

PT-2016-3174

Name of the Vulnerable Software and Affected Versions IBM Tivoli Endpoint Manager affected versions not specified Description The issue is related to resource management errors in IBM Tivoli Endpoint Manager, which could allow an unauthorized user to consume all resources and crash the system...

Moderate: Red Hat Security Advisory: org.ovirt.engine-root security, bug fix, and enhancement update

An update for org.ovirt.engine-root is now available for RHEV Engine version 4.0. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Unspecified Vulnerability in EMC ViPR SRM

EMC ViPR SRM is a suite of storage resource management software from EMC Corporation. The software enables intuitive understanding of storage relationships, analyzes configuration and capacity growth and optimizes resources to improve return on investment ROI in storage environments. A security...

EMC ViPR SRM Cross-Site Scripting Vulnerability

EMC ViPR SRM is a suite of storage resource management software from EMC Corporation. The software enables intuitive understanding of storage relationships, analyzes configuration and capacity growth and optimizes resources to improve return on investment ROI in storage environments. A cross-site...

PT-2016-3417

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.1.0 Description The issue is related to the DTLS implementation in OpenSSL, which does not properly restrict the lifetime of queue entries associated with unused out-of-order messages. This allows remote attackers t...

Multiple Huawei Server Intelligent Baseboard Management Controller Resource Management Vulnerabilities

Huawei RH1288 V3 and others are server products from Huawei, a Chinese company.Intelligent Baseboard Management Controller iBMC is one of the software used to manage server control units. A resource management vulnerability exists in iBMC in several Huawei servers. A local attacker could exploit...

SQL injection vulnerability in the gid parameter of the Default.aspx page of the CMS system of the resource management platform of Beijing HBM Information Technology Co.

Resource Management Platform CMS is a comprehensive management and application platform based on the cloud service system, through a multi-layer system architecture, establishing a multi-level cloud platform and cloud application environment covering provinces, municipalities, counties, schools a...

Security Advisory - Resource Management Vulnerability in Huawei Servers

Some Huawei servers have a resource management vulnerability in the iBMC Intelligent Baseboard Management Controller. A local attacker could exploit this vulnerability to exhaust iBMC resources and cause a denial of service. Vulnerability ID: HWPSIRT-2016-05251 This vulnerability has been assigne...

The vulnerability of the Apache HTTP Server web server allows attackers to trigger a service failure.

The vulnerability of the Apache HTTP Server is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions through modified control streams...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure memory consumption by using specially created TCP packets sent to the SSH port...

The vulnerability of the libxml2 library, which allows a hacker to trigger a service failure

The vulnerability of the xmlStringLenDecodeEntities function in the parser.c file of the libxml2 library is related to resource management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure resulting in wasted computing resources by using...

The vulnerability of the International Components for Unicode library allows a attacker to trigger a service failure or cause other adverse effects.

The vulnerability of the collator implementation i18n/ucol.cpp in the International Components for Unicode library is related to resource management errors. Exploiting this vulnerability may allow a malicious actor to cause service failures or other effects through a specially crafted sequence of...

The vulnerability of the client system in the VMware Horizon Client virtualization solution allows users of the guest operating system to execute code on the host operating system.

The vulnerability of the TPView.dll library in the VMware Horizon Client virtualization station client system is related to resource management errors. Exploiting this vulnerability allows users of the guest operating system to execute code on the host operating system...

The vulnerability of the client system in the VMware Horizon Client virtualization solution allows users of the guest operating system to execute code on the host operating system.

The vulnerability of the TPInt.dll library in the VMware Horizon Client virtualization station client system is related to resource management errors. Exploiting this vulnerability allows users of the guest operating system to execute code on the host operating system...

The vulnerability of VMware Fusion’s hypervisor allows users of the guest operating system to trigger a failure in the maintenance of the host operating system.

The vulnerability of the TPInt.dll library in VMware Fusion’s hypervisor is related to resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...

The vulnerability of the application interface of the IBM WebSphere Portal server allows a hacker to trigger a service failure.

The vulnerability of the IBM WebSphere Portal application server’s user interface is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of VMware Fusion’s hypervisor allows users of the guest operating system to trigger a failure in the maintenance of the host operating system.

The vulnerability of the TPView.dll library in VMware Fusion involves resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...