CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- bitcoin coreBitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 2 of 2).7.5 High
- bitcoin coreBitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 1 of 2).7.5 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal Vulnerable to DoS via Crafted Headless API Request7.1 High
- red hat build of keycloak 26.0, build of keycloak 26.0.16, build of keycloak 26.2 +1 more +3 moreKeycloak: keycloak tls client-initiated renegotiation denial of service7.5 High
- legion of the bouncy castle inc. bouncy castle for java fips, bouncy castle for java lts +1 moreBouncy Castle Vulnerable to Uncontrolled Resource Consumption5.9 Medium
- No product listedAn issue was discovered in the NDIS Usermode IO driver (RtkIOAC60.sys, version 6.0.5600.16348)...6.2 Medium
- oracle zfs storage appliance kitVulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component:...4.9 Medium
- oracle zfs storage appliance kitVulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component:...4.9 Medium
- oracle zfs storage appliance kitVulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component:...4.9 Medium
- oracle zfs storage appliance kitVulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core)...4.9 Medium
- oracle solarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The...6.5 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...5.5 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...5.5 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...7.5 High
- oracle zfs storage appliance kitVulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component:...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- processwireProcessWire CMS vulnerable to resource-exhaustion Denial of Service6.5 Medium
- No product listedHatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14)...9.8 Critical
- No product listedDenial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 (commit 52e4b43,...7.5 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +12 more +14 moreAn issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos...7.5 High
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +15 more +17 moreAn issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980,...7.5 High
- openbaoOpenBao vulnerable to denial of service via malicious JSON request processing7.5 High
- nvidia igx orin, jetson orin series, jetson thor series +2 moreNVIDIA Jetson Linux and IGX OS contain a vulnerability in NvMap, where improper tracking of...5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreRemote Procedure Call Denial of Service Vulnerability7.5 High
- hewlett packard enterprise (hpe) arubaos (aos)Vulnerability in AOS firmware allows for Authenticated Local malicious actor to Permanently Disable Boot6.0 Medium
- hewlett packard enterprise (hpe) arubaos (aos)Kernel Panic triggered by Modified Ethernet Frames leads to Denial of Service Vulnerability6.5 Medium
- No product listedAn issue in the Configure New Cluster interface of kafka-ui v0.6.0 to v0.7.2 allows attackers to...7.5 High
- tomofun furbo 360, furbo 360 dog camera firmware +1 moreTomofun Furbo 360 File Upload resource consumption5.3 Medium
github.com/microstack-tech/parallaxGoParallax is vulnerable to DoS via malicious p2p message7.5 High- authlibAuthlib : JWE zip=DEF decompression bomb enables DoS6.5 Medium
- sinatraSinatra has ReDoS vulnerability in ETag header value generation2.7 Low
- authlibAuthlib is vulnerable to Denial of Service via Oversized JOSE Segments7.5 High
- rackRack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing7.5 High
- amazon amazon.iondotnetDenial of Service issue in Amazon.IonDotnet8.7 High
- juniper junos spaceJunos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoS8.7 High
- juniper junos os evolvedJunos OS Evolved: PTX Series except PTX10003: An unauthenticated adjacent attacker sending specific valid traffic can cause a memory leak in cfmman leading to FPC crash and restart7.1 High
vllmPyPIvLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server6.5 Medium- rackRack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)7.5 High
- rackRack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)7.5 High
- rackRack's unbounded multipart preamble buffering enables DoS (memory exhaustion)7.5 High
- assimpOpen Asset Import Library Assimp Q3DLoader.cpp InternReadFile allocation of resources4.8 Medium
- qnap qsync centralQsync Central6.0 Medium
- tcl 65c655 firmwareA TCL Smart TV running a vulnerable UPnP/DLNA MediaRenderer implementation is affected by a...7.5 High
- stalwartlabs stalwartUnbounded Memory Allocation in Stalwart IMAP parser7.5 High
- flocksafety flock safetyThe Flock Safety Android Collins application (aka com.flocksafety.android.collins) 6.35.31 for...9.8 Critical
- Show moreLoading…