CWE-399
453 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-399page 8 of 10
- CVE-2016-1346MEDIUMCVSS 5.9EG 5.92016-04-06
The kernel in Cisco TelePresence Server 3.0 through 4.2(4.18) on Mobility Services Engine (MSE) 8710 devices allows remote attackers to cause a denial of service (panic and reboot) via a crafted sequence of IPv6 packets, aka Bug ID CSCuu46…
- CVE-2016-1344MEDIUMCVSS 5.9EG 5.92016-03-26
The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (device reload) via fragmented packets, aka Bug ID CSCux38417.
- CVE-2016-2523MEDIUMCVSS 5.9EG 5.92016-02-28
The dnp3_al_process_object function in epan/dissectors/packet-dnp.c in the DNP3 dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.
- CVE-2024-20407MEDIUMCVSS 5.8EG 5.82024-10-23
A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured policies on an affe…
- CVE-2021-1377MEDIUMCVSS 5.8EG 5.82021-03-24
A vulnerability in Address Resolution Protocol (ARP) management of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to prevent an affected device from resolving ARP entries for legitimate hosts o…
- CVE-2017-12311MEDIUMCVSS 5.8EG 5.82017-11-16
A vulnerability in the H.264 decoder function of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a Cisco Meeting Server media process to restart unexpectedly when it receives an illegal H.264 frame. The vulner…
- CVE-2017-6613MEDIUMCVSS 5.8EG 5.82017-04-20
A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to cause the DNS process to momentarily restart, which could lead to a partial denial of service (DoS) cond…
- CVE-2016-2116MEDIUMCVSS 5.7EG 5.72016-04-13
Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file.
- CVE-2017-14232MEDIUMCVSS 5.5EG 5.52019-08-15
The read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted flif file.
- CVE-2019-13648MEDIUMCVSS 5.5EG 5.52019-07-19
In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a craf…
- CVE-2019-12087MEDIUMCVSS 5.5EG 5.52019-05-14
Samsung S9+, S10, and XCover 4 P(9.0) devices can become temporarily inoperable because of an unprotected intent in the ContainerAgent application. For example, the victim becomes stuck in a launcher with their Secure Folder locked. NOTE: …
- CVE-2018-0457MEDIUMCVSS 5.5EG 5.52018-10-05
A vulnerability in the Cisco Webex Player for Webex Recording Format (WRF) files could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. An attacker could exploit this vulnerability by sending a user a…
- CVE-2018-0380MEDIUMCVSS 5.5EG 5.52018-07-18
Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attacker could exploit these vulnerabilities by providing a user with a malicious .ar…
- CVE-2016-10723MEDIUMCVSS 5.5EG 5.52018-06-21
An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resourc…
- CVE-2015-9252MEDIUMCVSS 5.5EG 5.52018-02-13
An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral() in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc.
- CVE-2014-8171MEDIUMCVSS 5.5EG 5.52018-02-09
The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new processes within a memory-constrained cgroup.
- CVE-2014-9637MEDIUMCVSS 5.5EG 5.52017-08-25
GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory consumption and segmentation fault) via a crafted diff file.
- CVE-2016-10292MEDIUMCVSS 5.5EG 5.52017-05-12
A denial of service vulnerability in the Qualcomm Wi-Fi driver could enable a proximate attacker to cause a denial of service in the Wi-Fi subsystem. This issue is rated as High due to the possibility of remote denial of service. Product: …
- CVE-2010-5329MEDIUMCVSS 5.5EG 5.52017-04-24
The video_usercopy function in drivers/media/video/v4l2-ioctl.c in the Linux kernel before 2.6.39 relies on the count value of a v4l2_ext_controls data structure to determine a kmalloc size, which might allow local users to cause a denial …
- CVE-2015-7313MEDIUMCVSS 5.5EG 5.52017-03-17
LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted tiff file.
- CVE-2014-9853MEDIUMCVSS 5.5EG 5.52017-03-17
Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file.
- CVE-2016-9354MEDIUMCVSS 5.5EG 5.52017-02-13
An issue was discovered in Moxa DACenter Versions 1.4 and older. A specially crafted project file may cause the program to crash because of Uncontrolled Resource Consumption.
- CVE-2016-6235MEDIUMCVSS 5.5EG 5.52017-02-02
The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (segmentation fault) via a crafted jpeg file.
- CVE-2016-5434MEDIUMCVSS 5.5EG 5.52017-01-30
libalpm, as used in pacman 5.0.1, allows remote attackers to cause a denial of service (infinite loop or out-of-bounds read) via a crafted signature file.
- CVE-2016-8883MEDIUMCVSS 5.5EG 5.52017-01-13
The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (assertion failure) via a crafted file.
- CVE-2016-8463MEDIUMCVSS 5.5EG 5.52017-01-12
A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of serv…
- CVE-2016-6767MEDIUMCVSS 5.5EG 5.52017-01-12
A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. V…
- CVE-2016-6764MEDIUMCVSS 5.5EG 5.52017-01-12
A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. V…
- CVE-2016-9561MEDIUMCVSS 5.5EG 5.52016-12-23
The che_configure function in libavcodec/aacdec_template.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service (allocation of huge memory, and being killed by the OS) via a crafted MOV file.
- CVE-2016-7122MEDIUMCVSS 5.5EG 5.52016-12-23
The avi_read_nikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decodes an AVI file that has a crafted 'nctg' structure.
- CVE-2016-6881MEDIUMCVSS 5.5EG 5.52016-12-23
The zlib_refill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file.
- CVE-2016-8826MEDIUMCVSS 5.5EG 5.52016-12-16
All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys for Windows or nvidia.ko for Linux) where a user can cause a GPU interrupt storm, leading to a denial of service.
- CVE-2016-9191MEDIUMCVSS 5.5EG 5.52016-11-28
The cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain operations, which allows local users to cause a denial of service (system hang) by leveraging access to a container environment for executing a c…
- CVE-2016-8650MEDIUMCVSS 5.5EG 5.52016-11-28
The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an add_key …
- CVE-2015-8953MEDIUMCVSS 5.5EG 5.52016-10-16
fs/overlayfs/copy_up.c in the Linux kernel before 4.2.6 uses an incorrect cleanup code path, which allows local users to cause a denial of service (dentry reference leak) via filesystem operations on a large file in a lower overlayfs layer.
- CVE-2016-7166MEDIUMCVSS 5.5EG 5.52016-09-21
libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted gzip file.
- CVE-2016-6900MEDIUMCVSS 5.5EG 5.52016-09-07
The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613; RH2288 V3 servers with software before V100R003C00SPC617; RH2288H V3 servers with software before V100R003C00SPC515;…
- CVE-2016-1415MEDIUMCVSS 5.5EG 5.52016-09-03
Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to cause a denial of service (application crash) via a crafted file, aka Bug ID CSCuz80455.
- CVE-2016-3156MEDIUMCVSS 5.5EG 5.52016-04-27
The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of service (host OS networking outage) by arranging for a large number of IP addresses.
- CVE-2016-2550MEDIUMCVSS 5.5EG 5.52016-04-27
The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket befo…
- CVE-2016-1496MEDIUMCVSS 5.5EG 5.52016-04-13
The graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 allows attac…
- CVE-2024-58113MEDIUMCVSS 5.3EG 5.32025-04-07
Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability.
- CVE-2023-29267MEDIUMCVSS 5.3EG 5.32024-06-12
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5is vulnerable to a denial of service, under specific configurations, as the server may crash when using a specially crafted SQL statement by an authentic…
- CVE-2023-20262MEDIUMCVSS 5.3EG 5.32023-09-27
A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access only. This vulnerability does not prevent the system …
- CVE-2021-1394MEDIUMCVSS 5.3EG 5.32021-03-24
A vulnerability in the ingress traffic manager of Cisco IOS XE Software for Cisco Network Convergence System (NCS) 520 Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition in the web manageme…
- CVE-2020-3188MEDIUMCVSS 5.3EG 5.32020-05-06
A vulnerability in how Cisco Firepower Threat Defense (FTD) Software handles session timeouts for management connections could allow an unauthenticated, remote attacker to cause a buildup of remote management connections to an affected dev…
- CVE-2018-0290MEDIUMCVSS 5.3EG 5.32018-05-17
A vulnerability in the TCP stack of Cisco SocialMiner could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition in the notification system. The vulnerability is due to faulty handling of new TCP connectio…
- CVE-2018-0286MEDIUMCVSS 5.3EG 5.32018-05-02
A vulnerability in the netconf interface of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on affected system. The vulnerability is due to improper handling of malformed r…
- CVE-2018-0273MEDIUMCVSS 5.3EG 5.32018-04-19
A vulnerability in the IPsec Manager of Cisco StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Routers and Virtualized Packet Core (VPC) System Software could allow an unauthenticated, remote attacker to terminate all active …
- CVE-2018-0189MEDIUMCVSS 5.3EG 5.32018-03-28
A vulnerability in the Forwarding Information Base (FIB) code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, network attacker to cause a denial of service (DoS) condition. The vulnerability is due to a limi…
Map vulnerabilities like CWE-399 to your infrastructure
EchelonGraph correlates every CVE — across CWE-399 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →