CWE-400
High likelihoodUncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
3,152 vulnerabilities with CWE-400
CVE-2016-5004
MEDIUM
Apache ws-xmlrpc 3.1.3 - Denial of Service via Content-Encoding Header Decompression
CVSS 6.5
CVE-2016-3104
HIGH
MongoDB 2.6 - Denial of Service via Non-Existent Database Authentication
CVSS 7.5
CVE-2016-8780
MEDIUM
Huawei CloudEngine <V100R006C00 - DoS
CVSS 6.5
CVE-2016-2225
HIGH
uclibc-ng < 1.0.11 - Denial of Service via Crafted DNS Packet
CVSS 7.5
CVE-2016-2224
HIGH
uclibc-ng < 1.0.12 - Denial of Service via Compressed DNS Reply
CVSS 7.5
CVE-2016-10058
MEDIUM
ImageMagick <6.9.6-3 - Memory Corruption
CVSS 5.5
CVE-2016-10047
MEDIUM
ImageMagick <6.9.4-7 - Memory Corruption
CVSS 5.5
CVE-2016-9643
HIGH
WebKit 2.4.11 - Denial of Service via Regex Memory Consumption
CVSS 7.5
CVE-2016-9367
HIGH
Moxa NPort <various - Path Traversal
CVSS 7.5
CVE-2016-8374
HIGH
Schneider Electric Magelis HMI - Denial of Service via Uncontrolled Resource Consumption
CVSS 7.5
CVE-2016-8367
MEDIUM
Schneider Electric Magelis HMI - Denial of Service via Connection Exhaustion
CVSS 5.3
CVE-2016-6171
HIGH
Knot DNS < 2.3.0 - Denial of Service via Large Zone Transfer
CVSS 8.6
CVE-2016-4571
MEDIUM
mini-xml < 2.7 - Denial of Service via Stack Consumption in mxml_write_node
CVSS 5.5
CVE-2016-4570
MEDIUM
mini-xml < 2.7 - Denial of Service via Stack Consumption in mxmlDelete
CVSS 5.5
CVE-2016-9039
MEDIUM
Joyent SmartOS 20161110T013148Z - DoS
CVSS 6.2
CVE-2016-4055
MEDIUM
moment < 2.11.2 - Denial of Service via Regular Expression in Duration Function
CVSS 6.5
CVE-2016-9310
MEDIUM
ntp < 4.2.8p9 - Unauthenticated Uncontrolled Resource Consumption via Control Mode Packet
CVSS 6.5
CVE-2016-7428
MEDIUM
NTP - Denial of Service via Broadcast Packet Poll Interval
CVSS 4.3
CVE-2016-7427
MEDIUM
NTP - Denial of Service via Broadcast Mode Replay Prevention Bypass
CVSS 4.3
CVE-2016-7426
HIGH
NTP 4.2.6-4.2.8 - Denial of Service via Spoofed Response Rate Limiting
CVSS 7.5
CVE-2016-6831
HIGH
CHICKEN < 4.11.0 - Denial of Service via Memory Leak in process-execute and process-spawn
CVSS 7.5
CVE-2016-9685
MEDIUM
Linux Kernel < 4.5.0 - Denial of Service via XFS Attribute List Memory Leaks
CVSS 5.5
CVE-2016-6213
MEDIUM
Linux Kernel < 4.8.15 - Denial of Service via MS_BIND Mount Namespace Exhaustion
CVSS 4.7
CVE-2016-8858
HIGH
OpenSSH 6.x-7.3 - Denial of Service via Duplicate KEXINIT Requests
CVSS 7.5
CVE-2016-8666
HIGH
Linux Kernel 3.14-3.16.35 - Denial of Service via GRO Path Tunnel Stacking
CVSS 7.5
Details
Vulnerabilities
3,152
Exploit Likelihood
High