CVE-2020-6173

CVE-2020-6173 affects The Update Framework (TUF) versions 0.7.2–0.12.1, with Uncontrolled Resource Consumption leading to client DoS. The issue arises when an attacker with repository file access can modify metadata and create many invalid signatures, delaying clients during signature verificatio...

CVE-2019-20146

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 11.0 through 12.6. It allows Uncontrolled Resource Consumption...

Design/Logic Flaw

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 11.0 through 12.6. It allows Uncontrolled Resource Consumption...

CVE-2019-20146

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 11.0 through 12.6. It allows Uncontrolled Resource Consumption...

CVE-2019-20146

GitLab CVE-2019-20146 affects GitLab Community Edition (CE) and Enterprise Edition (EE) 11.0 through 12.6 and allows Uncontrolled Resource Consumption. The connected Red Hat and OSV documents corroborate the issue description. Root cause details are not provided in the supplied materials, and no ...

CVE-2019-20146

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 11.0 through 12.6. It allows Uncontrolled Resource Consumption...

CVE-2019-12401

Solr versions 1.3.0 to 1.4.1, 3.1.0 to 3.6.2 and 4.0.0 to 4.10.4 are vulnerable to an XML resource consumption attack a.k.a. Lol Bomb via it’s update handler.?By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the server parses the XML...

MGASA-2020-0001 Updated apache-commons-compress- packages fix security vulnerability

pdated apache-commons-compress packages fix security vulnerability: A resource consumption vulnerability was discovered in apache-commons- compress in the way NioZipEncoding encodes filenames. Applications that use Compress to create archives, with one of the filenames within the archive being...

Updated apache-commons-compress- packages fix security vulnerability

pdated apache-commons-compress packages fix security vulnerability: A resource consumption vulnerability was discovered in apache-commons- compress in the way NioZipEncoding encodes filenames. Applications that use Compress to create archives, with one of the filenames within the archive being...

CVE-2019-14559

Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access...

F5 Networks BIG-IP : BIG-IP APM apd vulnerability (K61705126)

When the BIG-IP APM system processes certain requests, the apd/apmd process may consume excessive resources.CVE-2019-6661 Impact BIG-IP APM When this vulnerability is exploited, the BIG-IP APM system may experience excessive resource consumption, which may cause one of the following : Degraded...

CVE-2019-12402

A resource consumption vulnerability was discovered in apache-commons-compress in the way NioZipEncoding encodes filenames. Applications that use Compress to create archives, with one of the filenames within the archive being controlled by the user, may be vulnerable to this flaw. A remote attack...

CVE-2019-11478

An excessive resource consumption flaw was found in the way the Linux kernel's networking subsystem processed TCP Selective Acknowledgment SACK segments. While processing SACK segments, the Linux kernel's socket buffer SKB data structure becomes fragmented, which leads to increased resource...

The vulnerability of the BIND DNS server, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the BIND DNS server is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

MGASA-2019-0406 Updated spamassassin packages fix security vulnerabilities

The updated packages fix security vulnerabilities: In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA 3.4.3, we recommend that...

CVE-2019-6682

The CVE-2019-6682 issue affects F5 BIG-IP ASM: memory exhaustion risk when processing certain HTTP responses from origin servers, impacting resource-constrained systems with response-side features enabled. Affected versions include BIG-IP ASM: 15.0.0–15.0.1.1, 14.0.0–14.1.2.2, 13.1.0–13.1.3.1, 12...

The vulnerability of the fsl_lpspi_probe() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fsllpspiprobe function drivers/spi/spi-fsl-lpspi.c in the Linux kernel involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Debian DLA-2045-1 : tightvnc security update

Several vulnerabilities have recently been discovered in TightVNC 1.x, an X11 based VNC server/viewer application for Windows and Unix. CVE-2014-6053 The rfbProcessClientNormalMessage function in rfbserver.c in TightVNC server did not properly handle attempts to send a large amount of ClientCutTe...

Vulnerability of the rtl8xxxu_submit_int_urb() function (drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the rtl8xxxusubmitinturb function drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxucore.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Security Bulletin: A security vulnerability has been identified in lodash shipped with PowerAI

Summary Vulnerability CVE-2019-1010266 in lodash Vulnerability Details CVEID: CVE-2019-1010266 DESCRIPTION: lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides...