PT-2018-3557

Name of the Vulnerable Software and Affected Versions: ICPDAS OPC2MBTCP affected versions not specified Description: The issue is related to an uncontrolled resource consumption vulnerability in the MBTCPTool.dll library of the ICPDAS OPC2MBTCP Modbus server of the XP-8741-Atom industrial...

CVE-2018-16469: Uncontrolled Resource Consumption

The merge.recursive function in the merge package 1.2.1 can be tricked into adding or modifying properties of the Object prototype. These properties will be present on all objects allowing for a denial of service attack...

CVE-2018-11828: Uncontrolled Resource Consumption

When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get random ADC samples in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52...

Keycloak vulnerable to uncontrolled resource consumption

JBoss KeyCloak versions prior to 1.0.3.Final allow remote attackers to create a denial of service resource consumption by supplying a large value in the size parameter to auth/qrcode, related to QR code generation...

GHSA-R32R-3977-CGC3 Keycloak vulnerable to uncontrolled resource consumption

JBoss KeyCloak versions prior to 1.0.3.Final allow remote attackers to create a denial of service resource consumption by supplying a large value in the size parameter to auth/qrcode, related to QR code generation...

Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.Server.Kestrel.Core, Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions, and Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv

Microsoft made an internal discovery of a security vulnerability in version 2.x of ASP.NET Core where a specially crafted request can cause excess resource consumption in Kestrel...

PT-2018-19171

Name of the Vulnerable Software and Affected Versions ASP.NET Core versions 2.x Description A security issue was discovered in ASP.NET Core where a specially crafted request can cause excess resource consumption in Kestrel. Recommendations For ASP.NET Core versions 2.x, at the moment, there is no...

PT-2018-14464

Name of the Vulnerable Software and Affected Versions IBM FileNet Content Manager versions 5.2.1 and 5.5.0 Description The issue allows a remote attacker to exploit the vulnerability to expose sensitive information or consume memory resources through a XML External Entity Injection XXE attack whe...

spamassassin: Certain unclosed tags in crafted emails allow for scan timeouts and result in denial of service

A flaw was found in the way SpamAssassin processes HTML email containing unclosed HTML tags. A carefully crafted mail message could cause SpamAssassin to consume significant resources. If a large number of these messages are sent, a denial of service could occur potentially delaying or preventing...

CVE-2018-0054: Uncontrolled Resource Consumption

On QFX5000 Series and EX4600 switches, a high rate of Ethernet pause frames or an ARP packet storm received on the management interface fxp0 can cause egress interface congestion, resulting in routing protocol packet drops, such as BGP, leading to peering flaps. The following log message may also...

CVE-2018-15383: Uncontrolled Resource Consumption

A vulnerability in the cryptographic hardware accelerator driver of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a temporary denial of service DoS...

CVE-2018-15396: Uncontrolled Resource Consumption

A vulnerability in the Bulk Administration Tool BAT for Cisco Unity Connection could allow an authenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability exists because the affected software does not restrict the maximum size of...

CVE-2018-15399: Uncontrolled Resource Consumption

A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to exhaust the 1550-byte buffers on an affected device, resulting in a denial of service DoS condition. The...

CVE-2018-14648: Uncontrolled Resource Consumption

A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in the dosearch function. An unauthenticated attacker could use this flaw to provoke a denial of service...

EulerOS 2.0 SP3 : php (EulerOS-SA-2018-1310)

According to the version of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An infinite loop vulnerability was found in ext/iconv/iconv.c in PHP due to the iconv stream not rejecting invalid multibyte sequences. A remote...

Code injection

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended...

CVE-2018-8854: Uncontrolled Resource Consumption

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended...

CVE-2018-17281: Uncontrolled Resource Consumption

There is a stack consumption vulnerability in the reshttpwebsocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk through 13.21-cert2. It allows an attacker to crash Asterisk via a specially crafted HTTP request to upgrade the connecti...

CVE-2018-14827: Uncontrolled Resource Consumption

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. A remote, unauthenticated threat actor may intentionally send specially crafted Ethernet/IP packets to Port 44818, causing the software application to stop responding and crash. The user must restart the software to regain functionali...

CVE-2018-16949: Uncontrolled Resource Consumption

An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several data types used as RPC input variables were implemented as unbounded array types, limited only by the inherent 32-bit length field to 4 GB. An unauthenticated attacker could send, or claim to send, large input values...