CWE-1050: Excessive Platform Resource Consumption within a Loop
The product has a loop body or loop condition that contains a control element that directly or indirectly consumes platform resources, e.g. messaging, sessions, locks, or file descriptors.
A kind of CWE-405 Asymmetric Resource Consumption (Amplification).
From the CWE List. © The MITRE Corporation.
Newest
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 more Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding 5.3 Medium
- getkin kin-openapi kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression 5.3 Medium
- isc bind 9 Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees 7.5 High
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 more Sieve CPU resource usage is tracked in the compiled script, so an attacker that has valid... 3.1 Low
- thephpleague commonmark League CommonMark 1.3.0 before 2.10.2 Stored XSS via DisallowedRawHtml Bypass 5.3 Medium
- thephpleague commonmark league/commonmark: Quadratic-time denial of service when parsing crafted Markdown 7.5 High
- microsoft libxpm Denial of service via unsigned underflow in libXpm's write path 5.5 Medium
- websockets ws, red hat cluster observability operator 1.5.0, cryostat 4 +46 more +48 more ws: Memory exhaustion DoS from tiny fragments and data chunks 7.5 High
- nlnet labs unbound, red hat enterprise linux 10, enterprise linux 6 +5 more +7 more Unbounded name compression in certain cases causes degradation of service 6.9 Medium
- nlnet labs unbound, red hat data grid 8, enterprise linux 10 +10 more +12 more Long list of incoming EDNS options degrades performance 6.6 Medium
- red hat build of keycloak 26.2, build of keycloak 26.2.15, build of keycloak 26.4 +7 more +9 more Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters 7.5 High
- oisf suricata Suricata http1: quadratic complexity in headers parsing over multiple packets 5.3 Medium
- oisf suricata Suricata eve/alert: http1 xff handling can lead to denial of service 3.7 Low
- evershop evershop allows unauthenticated attackers to exhaust application server's resources via "GET /images" API 7.5 High
- owasp modsecurity ModSecurity has possible DoS vulnerability in sanitiseArg action 7.5 High
- owasp-modsecurity modsecurity ModSecurity Has Possible DoS Vulnerability 7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 more Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header 5.3 Medium
- jonschlinkert braces Memory Exhaustion in braces 7.5 High
- linux kernel A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The... 7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 more In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number... 7.5 High
- kubernetes Kubernetes API Server denial of service vulnerability from malicious YAML payloads 6.5 Medium