Resource Management Errors — CVEs by weakness type

Mediawiki HIGH 7.1

CVE-2015-2936

MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a …

Patch available

Fix from $1,950 2015-04-13

Quassel MEDIUM 5.0

CVE-2015-2779

Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of servic…

Fix: after 0.11.0

Fix from $1,600 2015-04-10

Quassel MEDIUM 5.0

CVE-2015-2778

Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to cause a denial of service (crash)…

Fix: after 0.11.0

Fix from $1,600 2015-04-10

Subversion MEDIUM 5.0

CVE-2015-0248EPSS 12%

The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of …

Mitigation only

Fix from $1,600 2015-04-08

Subversion HIGH 7.8

CVE-2015-0202EPSS 8%

The mod_dav_svn server in Subversion 1.8.0 through 1.8.11 allows remote attackers to cause a denial of service (memory consumption) via a large numbe…

Mitigation only

Fix from $1,950 2015-04-08

Ios Xe HIGH 7.1

CVE-2015-0688

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when NAT is enabled, allows remote attackers to cause a …

Mitigation only

Fix from $1,950 2015-04-04

Nx Os MEDIUM 6.3

CVE-2015-0686

The SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High Availability (HA) policy is configured, allows remote aut…

Mitigation only

Fix from $1,600 2015-04-03

iOS MEDIUM 6.3

CVE-2015-0687

The SNMP implementation in Cisco IOS 15.1(2)SG4 on Catalyst 4500 devices, when single-switch Virtual Switching System (VSS) is configured, allows rem…

Mitigation only

Fix from $1,600 2015-04-03

Slapi Nis HIGH 7.8

CVE-2015-0283

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denia…

Fix: after 0.54.1

Fix from $1,950 2015-03-30

Opensuse MEDIUM 5.0

CVE-2014-3619

The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a "00000000" frag…

Mitigation only

Fix from $1,600 2015-03-27

Ios Xr MEDIUM 5.0

CVE-2015-0672

The DHCPv4 server in Cisco IOS XR 5.2.2 on ASR 9000 devices allows remote attackers to cause a denial of service (service outage) via a flood of craf…

Mitigation only

Fix from $1,600 2015-03-26

iOS HIGH 7.8

CVE-2015-0648

Memory leak in Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (memory consumption) via crafted Commo…

Mitigation only

Fix from $1,950 2015-03-26

Ios Xe HIGH 7.8

CVE-2015-0646

Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS be…

Mitigation only

Fix from $1,950 2015-03-26

Ios Xe HIGH 7.8

CVE-2015-0643

Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3…

Mitigation only

Fix from $1,950 2015-03-26

Django MEDIUM 5.0

CVE-2015-2316

The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, …

Patch available

Fix from $1,600 2015-03-25

Videoscape Delivery System For Internet Streamer MEDIUM 5.0

CVE-2015-0671

The DNS implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.2(1) allows remote attackers to cause a denial of ser…

Mitigation only

Fix from $1,600 2015-03-20