Moxa EDS Ethernet Switches

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Moxa Equipment: EDS-G508E, EDS-G512E, and EDS-G516E Series Ethernet Switches Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could...

Vulnerability of the mlx5_fpga_conn_create_cq() function (driver/net/ethernet/mellanox/mlx5/core/fpga/conn.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the mlx5fpgaconncreatecq function driver/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the Linux kernel involves unregulated resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Denial Of Service (DoS)

jboss-remoting is vulnerable to denial of service. A remote attacker is able to crash the application by holding remote connections indefinitely, causing excessive resource consumption...

CVE-2019-12420

In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly...

CVE-2019-12420

In Apache SpamAssassin, versions prior to 3.4.3 are affected by CVE-2019-12420: a specially crafted message can cause excessive resource consumption, resulting in a denial of service. The recommended remediation is to upgrade to SpamAssassin 3.4.3 as soon as possible. Some advisories also note th...

CVE-2019-12420

In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly...

spamassassin -- multiple vulnerabilities

the Apache Spamassassin project reports: An input validation error of user-supplied input parsing multipart emails. Specially crafted emails can consume all resources on the system. A local user is able to execute arbitrary shell commands through specially crafted nefarious CF files...

EulerOS 2.0 SP2 : qt (EulerOS-SA-2019-2381)

According to the versions of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service memory consumption via an XML Entity Expansion XEE...

The vulnerability of the `qlalloc_large_buffers()` function (drivers/net/ethernet/qlogic/qla3xxx.c) in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the qlalloclargebuffers function drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2019-16671

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Remote authenticated users can crash a device with a special packet because of Uncontrolled Resource Consumption...

Design/Logic Flaw

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Remote authenticated users can crash a device with a special packet because of Uncontrolled Resource Consumption...

CVE-2019-16671

CVE-2019-16671 affects Weidmueller IE-SW-VL05M/VL08MT/PL10M series switches. The vulnerability is described as Uncontrolled Resource Consumption that allows remote authenticated users to crash a device by sending a special packet. Red Hat and PRION entries confirm the affected device models and t...

CVE-2019-16671

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Remote authenticated users can crash a device with a special packet because of Uncontrolled Resource Consumption...

Weidmueller Industrial Ethernet Switches

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Weidmueller Equipment: Industrial Ethernet Switches Vulnerabilities: Improper Restriction of Excessive Authentication Attempts, Uncontrolled Resource Consumption, Missing Encryption of Sensitive...

Denial Of Service (DoS)

sonar-scanner-api is vulnerable to denial of serviceDoS attacks. The vulnerability exists in the ServerConnection.java class because the downloadFile function does not properly close response body, resulting in excessive resource consumption that can potentially lead to an application crash...

The vulnerability of the Apache Tomcat application server, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures when the WINDOWUPDATE message is not sent to the connection window thread 0...

MGASA-2019-0341 Updated zipios++ packages fix security vulnerability

Updated zipios++ packages fix security vulnerability: Mike Salvatore discovered that Zipios mishandled certain malformed ZIP files. An attacker could use this vulnerability to cause a denial of service or consume system resources CVE-2019-13453...

CVE-2019-6667

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.5.1-11.6.5, under certain conditions, TMM may consume excessive resources when processing traffic for a Virtual Server with the FIX Financial Information eXchange profile applied...

Design/Logic Flaw

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.5.1-11.6.5, under certain conditions, TMM may consume excessive resources when processing traffic for a Virtual Server with the FIX Financial Information eXchange profile applied...

CVE-2019-6667

CVE-2019-6667 affects F5 BIG-IP TMM when a FIX profile is used; under certain conditions, TMM can exhaust resources and cause a DoS as traffic is processed for a Virtual Server with FIX. Affected versions range from 11.5.1–15.0.1 across multiple BIG-IP lines; remediation per the advisory is to up...