Juniper Junos OS Vulnerability (JSA11269)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11269 advisory. - An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause 100% CPU load and t...

SUSE-SU-2022:0056-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2021-45485: Fixed an information leak because of certain use of a hash table which use IPv6 source addresses. bsc1194094 - CVE-2021-45486: Fixed an information leak because the hash table is very...

PT-2022-1523 · Microsoft · Windows Event Tracing +1

Name of the Vulnerable Software and Affected Versions: Windows Event Tracing affected versions not specified Description: The issue is related to an uncontrolled resource consumption in the Windows Event Tracing service, which is associated with a discretionary access control list DACL in the...

PT-2022-1512 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to an uncontrolled consumption of resources in the Windows Hyper-V hardware virtualization system, which can be exploited to cause a denial of service. This...

CVE-2022-21670 Uncontrolled Resource Consumption in markdown-it

markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds aside from upgrading...

Infinite loop causing Denial of Service in colors

colors is a library for including colored text in node.js consoles. Between 07 and 09 January 2022, colors versions 1.4.1, 1.4.2, and 1.4.44-liberty-2 were published including malicious code that caused a Denial of Service due to an infinite loop. Software dependent on these versions experienced...

CVE-2021-46149

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A denial of service resource consumption can be accomplished by searching for a very long key in a Language Name Search...

Denial of service

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A denial of service resource consumption can be accomplished by searching for a very long key in a Language Name Search...

CVE-2021-40011

There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity...

Design/Logic Flaw

Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resource consumption leading to battery exhaustion. As an example, the Schlage BE468 version 3.42 door lock is vulnerable and fails open at a low battery level...

Denial of service

There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity...

CVE-2021-40011

There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity...

CVE-2021-40011

CVE-2021-40011 describes an uncontrolled resource consumption vulnerability in the display module. Exploitation could impact integrity. No concrete vendor/product/version details are provided in the connected documents; remediation/patch information is not specified in the supplied materials.

CVE-2021-46149

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A denial of service resource consumption can be accomplished by searching for a very long key in a Language Name Search...

CVE-2021-46149

MediaWiki versions prior to 1.35.5, 1.36.x prior to 1.36.3, and 1.37.x prior to 1.37.1 are affected by a denial-of-service weakness in the Language Name Search (api.php) caused by insufficient validation of very long search keys, leading to resource consumption. Connected sources corroborate the ...

CVE-2020-9059

CVE-2020-9059 affects Z-Wave devices built on Silicon Labs 500-series chipsets using S0 authentication. The root issue is uncontrolled resource consumption that can lead to battery exhaustion, with an example of Schlage BE468 (v3.42) failing open at low battery. Public sources describe multiple m...

CVE-2020-9059

Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resource consumption leading to battery exhaustion. As an example, the Schlage BE468 version 3.42 door lock is vulnerable and fails open at a low battery level...

Uncontrolled Resource Consumption in simple_asn1

An issue was discovered in the simpleasn1 crate 0.6.0 before 0.6.1 for Rust. There is a panic if UTCTime data, supplied by a remote attacker, has a second character greater than 0x7f...

GHSA-G4H2-4WVH-GRC5 Uncontrolled Resource Consumption in simple_asn1

An issue was discovered in the simpleasn1 crate 0.6.0 before 0.6.1 for Rust. There is a panic if UTCTime data, supplied by a remote attacker, has a second character greater than 0x7f...

GHSA-Q674-XM3X-2926 Uncontrolled Resource Consumption in parse-link-header

The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service ReDoS via the checkHeader function...