CVE-2024-38316

MEDIUM Year: 2024
CVSS v3 Score
6.5
Medium
Weakness Type
CWE-770
View all →

Vulnerability Description

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of service.

Related Vulnerabilities

CVE-2017-11525

MEDIUM
CVSS:6.5(Medium)

The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

CWE-7702017

CVE-2017-12432

MEDIUM
CVSS:6.5(Medium)

In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c, which allows attackers to cause a denial of service.

CWE-7702017

CVE-2017-12563

MEDIUM
CVSS:6.5(Medium)

In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which allows attackers to cause a denial of service.

CWE-7702017

CVE-2017-12643

MEDIUM
CVSS:6.5(Medium)

ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c.

CWE-7702017

CVE-2017-12691

MEDIUM
CVSS:6.5(Medium)

The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

CWE-7702017

CVE-2017-12692

MEDIUM
CVSS:6.5(Medium)

The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted VIFF file.

CWE-7702017