CWE-400

High likelihood

Uncontrolled Resource Consumption

Parent: CWE-664 - Improper Control of a Resource Through its Lifetime

The product does not properly control the allocation and maintenance of a limited resource.

3,152 vulnerabilities with CWE-400
CVE-2019-16764 MEDIUM
PowAssent < 0.4.4 - Denial of Service via String.to_atom/1
CVSS 6.5
CVE-2019-11287 HIGH
RabbitMQ 3.7.0-3.7.20 and 3.8.0 - Denial of Service via X-Reason HTTP Header Format String
CVSS 7.5
CVE-2019-15593 MEDIUM
GitLab 12.2.3 - Denial of Service via Issue Comments
CVSS 6.5
CVE-2019-6661 HIGH
BIG-IP APM 11.5.1-11.6.5 - Uncontrolled Resource Consumption in APD/APMD Daemon
CVSS 7.5
CVE-2019-6660 HIGH
F5 BIG-IP 13.1.0-13.1.1, 14.0.0-14.0.1, 14.1.0-14.1.2 - Denial of Service via Uncontrolled Resource Consumption
CVSS 7.5
CVE-2019-13555 MEDIUM
Mitsubishi Electric MELSEC-Q and MELSEC-L Series Firmware - Denial of Service via FTP Service
CVSS 5.9
CVE-2019-17360 HIGH
Hitachi Command Suite 7.0.0-00-8.7.0-00 - Unauthenticated Denial of Service via Uncontrolled Resource Consumption
CVSS 7.5
CVE-2019-10504 MEDIUM
Qualcomm Mdm9206 Firmware - Denial of Service
CVSS 6.5
CVE-2019-12625 HIGH
ClamAV < 0.101.3 - Unauthenticated Denial of Service via Zip Bomb
CVSS 7.5
CVE-2019-5043 HIGH
Nest Cam IQ Indoor Firmware 4620002 - Denial of Service via Weave Daemon TCP Connection Exhaustion
CVSS 7.5
CVE-2019-7620 HIGH
Logstash 6.0.0-6.8.3 - Unauthenticated Denial of Service via Beats Input Plugin
CVSS 7.5
CVE-2019-15264 MEDIUM
Cisco Aironet and Catalyst 9100 Access Points - Unauthenticated Denial of Service via CAPWAP Message Flood
CVSS 6.5
CVE-2019-17592 HIGH
csv-parse < 4.4.6 - Regular Expression Denial of Service via __isInt Function
CVSS 7.5
CVE-2019-13921 HIGH
SIMATIC WinAC RTX (F) 2010 < SP3 Update 1 - DoS
CVSS 7.5
CVE-2019-10936 HIGH
Siemens SIMATIC and DK Standard Ethernet Controller Firmware - Unauthenticated Denial of Service via UDP Packet Flood
CVSS 7.5
CVE-2019-10923 HIGH
Siemens CP1604 Firmware < 2.8 - Denial of Service via IRT Synchronization Disruption
CVSS 7.5
CVE-2019-0059 HIGH
Juniper Junos OS 18.1 < 18.1R2-S4, 18.1 < 18.1R3-S1, 18.1X75 - Denial of Service via BGP State Processing
CVSS 7.5
CVE-2019-15226 HIGH
Envoy 1.10.0-1.11.1 - Denial of Service via O(n^2) Header Size Verification
CVSS 7.5
CVE-2019-6015 HIGH
FON2601E-SE/RE/FSW-S/FSW-B < 1.1.7 - Uncontrolled Resource Consumption via Open DNS Resolver
CVSS 7.5
CVE-2019-15256 HIGH
Cisco ASA 9.7-9.8.4.10/9.9-9.9.2.47 & FTD 6.2.0-6.2.3.11 - DoS via IKEv1 Traffic
CVSS 8.6
CVE-2019-12714 MEDIUM
Cisco IC3000 Industrial Compute Gateway Firmware < 1.1.1 - Authenticated Denial of Service via Web Management Interface
CVSS 6.5
CVE-2019-12700 MEDIUM
Cisco Firepower Threat Defense, Firepower Management Center, and FXOS - Authenticated DoS via PAM SSH Session Exhaustion
CVSS 6.5
CVE-2019-12698 HIGH
Cisco ASA & FTD Unauthenticated DoS via WebVPN HTTP Request
CVSS 7.5
CVE-2019-9349 MEDIUM
Android 10 - Remote Denial of Service via Improper Input Validation in libstagefright
CVSS 6.5
CVE-2019-12659 HIGH
Cisco IOS XE - Unauthenticated Denial of Service via HTTP Server Logging Mechanism
CVSS 7.5
Details
Vulnerabilities 3,152
Exploit Likelihood High