CVE-2021-20600

Summary: CVE-2021-20600 affects Mitsubishi Electric MELSEC iQ-R Series C Controller Module R12CCPU-V (firmware version 16 and earlier). An attacker can remotely trigger a DoS by sending a high volume of packets during startup, potentially preventing the module from starting and requiring a system...

Mitsubishi Electric MELSEC iQ-R Series C Controller Module (Update B)

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: MELSEC iQ-R Series C Controller Module R12CCPU-V Vulnerability: Uncontrolled Resource Consumption 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...

CVE-2021-39877

A vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resource consumption with a specially crafted file...

GitLab 资源管理错误漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to view a project's file contents, commit history, bug lists, and more. A resource management error vulnerability exists in GitLab,...

The vulnerability of the cross-platform hypervisor Xen kernel in the Linux operating system, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure for dom0 or domain drivers.

The vulnerability of the cross-platform hypervisor Xen in the Linux operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow an attacker to cause a failure in the dom0 service or the domain driver...

The vulnerability of the intel_pmu_drain_pebs_nhm function (arch/x86/events/intel/ds.c) in the Linux operating system’s kernel, which involves uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the intelpmudrainpebsnhm function arch/x86/events/intel/ds.c in the Linux operating system’s kernel is related to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger service interruptions by using a specially created proble...

The vulnerability of the push rules on the Synapse home server, related to uncontrolled resource consumption, allows a violator to trigger a service failure.

The vulnerability of the push rules on the Synapse home server is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the authentication and authorization module for the Apache 2.x HTTP server, Mod_auth_openidc, related to uncontrolled resource consumption, allows attackers to cause service interruptions.

The vulnerability of the authentication and authorization module for the Apache 2.x HTTP server, Modauthopenidc, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the sshd-core Java library component, which supports the SSH protocol of Apache SSHD, allows a attacker to cause a service failure.

The vulnerability of the sshd-core Java library component, which supports SSH protocol with Apache SSHD, is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...

The vulnerability of the Addressable library, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Addressable library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the Eventlet network library in Python software relates to uncontrolled resource consumption, allowing a hacker to perform a denial-of-service attack.

The vulnerability of the Eventlet web library in Python software relates to an uncontrolled resource consumption when processing large web socket messages. Exploiting this vulnerability could allow a malicious actor to perform a denial-of-service attack by sending compressed message data...

GHSA-98VV-PW6R-Q6Q4 Uncontrolled Resource Consumption in pillow

The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function...

Huawei HarmonyOS 资源管理错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in HUAWEI HarmonyOS, which stems from an uncontrolled resource consumption vulnerability in a component of HarmonyOS...

openSUSE 15 Security Update : dovecot23 (openSUSE-SU-2021:1225-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1225-1 advisory. - The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular...

GHSA-WHGM-JR23-G3J9 Uncontrolled Resource Consumption in ansi-html

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...

SUSE SLES15: dovecot23 / dovecot23-backend-mysql / dovecot23-backend-pgsql / etc (SUSE-SU-2021:2892-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2892-1 advisory. Update dovecot to version 2.3.15 jscSLE-19970: Security issues fixed: - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in...

SUSE SLES15: dovecot23 / dovecot23-backend-mysql / dovecot23-backend-pgsql / etc (SUSE-SU-2021:2891-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2891-1 advisory. Update dovecot to version 2.3.15 jscSLE-19970: Security issues fixed: - CVE-2021-29157: Dovecot does not correctly escape kid and a...

SUSE SLES15: dovecot23 / dovecot23-backend-mysql / dovecot23-backend-pgsql / etc (SUSE-SU-2021:2890-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2890-1 advisory. Update dovecot to version 2.3.15 jscSLE-19970: Security issues fixed: - CVE-2021-29157: Dovecot does not correctly escape kid and a...

GHSA-QPGV-G792-WH6X Uncontrolled Resource Consumption in parse_duration

An issue was discovered in the parseduration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service CPU and memory consumption via a duration string with a large exponent...