CWE:

	Topic	Date	Author
Med.	ZyXEL P-660HW UDP fragmentation Denial of Service	12.01.2018	Hosein Askari
Med.	ZyXEL TTL Expiry Denial of Service	25.12.2017	Hosein Askari
Low	Android Private Internet Access Denial Of Service	30.10.2017	nightwatchcybersecurit...
Low	libgedit.a mishandling NUL Blocks in gedit(GNOME text editor)	02.09.2017	Hosein Askari
Low	Trihedral VTScada DoS / XSS / Information Disclosure	01.07.2017	Karn Ganeshen
Med.	MikroTik UDP Flood Denial of Service	10.05.2017	Hosein Askari
Med.	BackBox OS Denial Of Service(CPU Consumption)	01.04.2017	Hosein Askari(FarazPaj...
Med.	MikroTik RouterBoard V-6.38.5 Denial Of Service | CPU Consumption	28.03.2017	Hosein Askari (FarazPa...
Med.	Android Qualcomm GPS/GNSS Man-In-The-Middle	12.10.2016	Yakov Shafranovich
Low	Open-Xchange App Suite 7.8.1 Information Disclosure	23.06.2016	Martin Heiland
Med.	SAP Afaria 7 XcListener DoS in the module XeClient.Dll	19.06.2015	Vahagn Vardanyan
Med.	XMPP-Layer Compression Uncontrolled Resource Consumption	06.04.2014	Giancarlo Pellegrino
Low	Guitar Pro 6.1.1 r10791 (.gpx) Denial of Service Exploit	06.05.2012	condis

---

CVEMAP Search Results

CVE

Details

Description

2019-11-25

Medium

CVE-2019-14891

Vendor: Kubernetes Software: Cri-o

A flaw was found in cri-o, as a result of all pod-related processes being placed in the same memory cgroup. This can result in container management (conmon) processes being killed if a workload process triggers an out-of-memory (OOM) condition for the cgroup. An attacker could abuse this flaw to get host network access on an cri-o host.

2019-11-23

Medium

CVE-2019-11287

Vendor: Pivotal software Software: Rabbitmq

Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of service attack. The "X-Reason" HTTP Header can be leveraged to insert a malicious Erlang format string that will expand and consume the heap, resulting in the server crashing.

2019-11-22

Low	CVE-2019-15593	Vendor: Gitlab Software: Gitlab	GitLab 12.2.3 contains a security vulnerability that allows a user to affect the availability of the service through a Denial of Service attack in Issue Comments.
High	CVE-2012-0877	Vendor: Python Software: Pyxml	PyXML: Hash table collisions CPU usage Denial of Service

2019-11-18

High	CVE-2019-19053	Vendor: Linux Software: Linux kernel	A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy_from_iter_full() failures, aka CID-bbe692e349e2.
High	CVE-2019-19054	Vendor: Linux Software: Linux kernel	A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b.
High	CVE-2019-19056	Vendor: Linux Software: Linux kernel	A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-db8fd2cde932.
High	CVE-2019-19057	Vendor: Linux Software: Linux kernel	Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-d10dcb615c8e.
High	CVE-2019-19058	Vendor: Linux Software: Linux kernel	A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures, aka CID-b4b814fec1a5.
High	CVE-2019-19059	Vendor: Linux Software: Linux kernel	Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering iwl_pcie_init_fw_sec() or dma_alloc_coherent() failures, aka CID-0f4f199443fa.

 

---

Copyright 2019, cxsecurity.com