PT-2021-14381 · Synapse +1 · Synapse +1

Name of the Vulnerable Software and Affected Versions: Synapse versions prior to 1.25.0 Description: A malicious homeserver could redirect requests to their .well-known file to a large file, leading to a denial of service attack where homeservers consume significantly more resources when requesti...

Ovarro TBox (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Ovarro Equipment: TBoxLT2 All models, TBox MS-CPU32, TBox MS-CPU32-S2, TBox RM2 All models, TBox TG2 All models --------- Begin Update A Part 1 of 3 --------- Vulnerabilities: Code Injection,...

The vulnerability of Intel Ethernet E810 series network adapter drivers allows a hacker to cause a service failure.

The vulnerability of Intel Ethernet E810 series network adapter drivers is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause service interruptions...

CVE-2020-24504

An uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux may allow an authenticated user to potentially cause a denial of service via local access...

CVE-2020-28496: Uncontrolled Resource Consumption

This affects the package three before 0.125.0. This can happen when handling rgb or hsl colors. PoC: var three = require'three' function buildblank n var ret = "rgb" for var i = 0; i n; i++ ret += " " return ret + ""; var Color = three.Color var time = Date.now; new Colorbuildblank50000 var...

CVE-2020-24504

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

Design/Logic Flaw

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-24504

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-24504

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-24504

CVE-2020-24504: Affects Intel Ethernet E810 Adapter drivers for Linux. Uncontrolled resource consumption could allow a locally-authenticated user to cause denial of service. Expected fix is upgrade to Linux driver version 1.0.4 or later (per initial description). MiracleLinux AXSA advisory corrob...

CVE-2020-24504

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-24504: Uncontrolled Resource Consumption

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2021-1378: Uncontrolled Resource Consumption

A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service DoS condition. The vulnerability is due to a logic error that may occur under specific...

CVE-2021-22553: Uncontrolled Resource Consumption

Any git operation is passed through Jetty and a session is created. No expiry is set for the session and Jetty does not automatically dispose of the session. Over multiple git actions, this can lead to a heap memory exhaustion for Gerrit servers. We recommend upgrading Gerrit to any of the versio...

The vulnerability in the implementations of the IPv4Interface and IPv6Interface classes in the Lib/ipaddress.py module of the Python programming language allows a attacker to cause a service failure.

The vulnerability of the IPv4Interface and IPv6Interface classes in the Lib/ipaddress.py module of the Python programming language involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2020-35559: Uncontrolled Resource Consumption

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unused function that allows an authenticated attacker to use up all available IPs of an account and thus not allow creation of new devices and users...

PT-2021-3189

Name of the Vulnerable Software and Affected Versions lodash versions prior to 4.17.21 Description The issue is related to the toNumber, trim, and trimEnd functions in the lodash library, which can lead to an uncontrolled consumption of resources, potentially causing a denial of service. This can...

CVE-2020-13949: Uncontrolled Resource Consumption

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service...

Uncontrolled Resource Consumption

In Apache Thrift to, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service...

Uncontrolled Resource Consumption

The PostgreSQL adapter in Active Record suffers from a regular expression denial of service REDoS vulnerability. Carefully crafted input can cause the input validation in the money type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression, resulting in the...