CWE:

	Topic	Date	Author
Med.	ModSecurity 3.0.x Denial Of Service	17.09.2020	Christian Folini
Med.	ZyXEL P-660HW UDP fragmentation Denial of Service	12.01.2018	Hosein Askari
Med.	ZyXEL TTL Expiry Denial of Service	25.12.2017	Hosein Askari
Low	Android Private Internet Access Denial Of Service	30.10.2017	nightwatchcybersecurit...
Low	libgedit.a mishandling NUL Blocks in gedit(GNOME text editor)	02.09.2017	Hosein Askari
Low	Trihedral VTScada DoS / XSS / Information Disclosure	01.07.2017	Karn Ganeshen
Med.	MikroTik UDP Flood Denial of Service	10.05.2017	Hosein Askari
Med.	BackBox OS Denial Of Service(CPU Consumption)	01.04.2017	Hosein Askari(FarazPaj...
Med.	MikroTik RouterBoard V-6.38.5 Denial Of Service | CPU Consumption	28.03.2017	Hosein Askari (FarazPa...
Med.	Android Qualcomm GPS/GNSS Man-In-The-Middle	12.10.2016	Yakov Shafranovich
Low	Open-Xchange App Suite 7.8.1 Information Disclosure	23.06.2016	Martin Heiland
Med.	SAP Afaria 7 XcListener DoS in the module XeClient.Dll	19.06.2015	Vahagn Vardanyan
Med.	XMPP-Layer Compression Uncontrolled Resource Consumption	06.04.2014	Giancarlo Pellegrino
Low	Guitar Pro 6.1.1 r10791 (.gpx) Denial of Service Exploit	06.05.2012	condis

---

CVEMAP Search Results

CVE

Details

Description

2020-09-17

Low

CVE-2020-0287

Vendor: Google Software: Android

In libmkvextractor, there is a possible resource exhaustion due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-141860394

2020-09-16

Medium

CVE-2020-10781

Vendor: Linux Software: Linux kernel

A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.

2020-09-11

Medium

CVE-2020-15166

Vendor: Zeromq Software: Libzmq

In ZeroMQ before version 4.3.3, there is a denial-of-service vulnerability. Users with TCP transport public endpoints, even with CURVE/ZAP enabled, are impacted. If a raw TCP socket is opened and connected to an endpoint that is fully configured with CURVE/ZAP, legitimate clients will not be able to exchange any message. Handshakes complete successfully, and messages are delivered to the library, but the server application never receives them. This is patched in version 4.3.3.

2020-09-10

Medium

CVE-2018-17145

Vendor: Bcoin Software: Bcoin

Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INVDoS. NOTE: this can also affect other cryptocurrencies, e.g., if they were forked from Bitcoin Core after 2017-11-15.

2020-09-09

Medium	CVE-2020-14384	Vendor: Redhat Software: Jboss enterp...	A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBossWeb, leaving it vulnerable to a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame. The highest threat from this vulnerability is to system availability.
Medium	CVE-2020-2039	Vendor: Paloaltonetworks Software: Pan-os	An uncontrolled resource consumption vulnerability in Palo Alto Networks PAN-OS allows for a remote unauthenticated user to upload temporary files through the management web interface that are not properly deleted after the request is finished. It is possible for an attacker to disrupt the availability of the management web interface by repeatedly uploading files until available disk space is exhausted. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1 versions earlier than PAN-OS 9.1.4; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.

2020-09-01

Medium

CVE-2019-5645

Vendor: Rapid7 Software: Metasploit

By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established, or cause a resource exhaustion on the Metasploit server.

2020-08-29

High

CVE-2020-3566

Updating...

A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. The vulnerability is due to insufficient queue management for Internet Group Management Protocol (IGMP) packets. An attacker could exploit this vulnerability by sending crafted IGMP traffic to an affected device. A successful exploit could allow the attacker to cause memory exhaustion, resulting in instability of other processes. These processes may include, but are not limited to, interior and exterior routing protocols. Cisco will release software updates that address this vulnerability.

2020-08-27

Low

CVE-2020-3504

Updating...

A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of CLI command parameters. An attacker could exploit this vulnerability by executing specific commands on the local-mgmt CLI on an affected device. A successful exploit could allow the attacker to cause internal system processes to fail to terminate properly, which could result in a buildup of stuck processes and lead to slowness in accessing the UCS Manager CLI and web UI. A sustained attack may result in a restart of internal UCS Manager processes and a temporary loss of access to the UCS Manager CLI and web UI.

2020-08-26

Medium

CVE-2020-5921

Vendor: F5 Software: Big-ip acces...

in BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, Syn flood causes large number of MCPD context messages destined to secondary blades consuming memory leading to MCPD failure. This issue affects only VIPRION hosts with two or more blades installed. Single-blade VIPRION hosts are not affected.

 

---

Copyright 2020, cxsecurity.com