CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- ericmj decimalUnbounded exponent in decimal enables unauthenticated DoS6.9 Medium
youtube-regexnpmyoutube-regex vulnerable to Regex Denial of Service7.5 High- honoHono: bodyLimit() can be bypassed for chunked / unknown-length requests6.5 Medium
- kanidmKanidm: Unauthenticated process abort via SCIM filter stack exhaustion8.7 High
- emmett-framework granianGranian: Unauthenticated DoS via WebSocket subprotocol header panic7.5 High
- micronaut-projects micronaut-coreMicronaut Framework: Unbounded formattersCache in TimeConverterRegistrar Allows Memory Exhaustion via Accept-Language Header7.5 High
- micronaut-projects micronaut-coreMicronaut Framework: Unbounded bundleCache in ResourceBundleMessageSource Allows Memory Exhaustion via Accept-Language Header3.7 Low
- cisco crosswork network change automationCisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory0.0 None
- No product listedUnauthenticated DoS in ZTE H8102E, H168N, H167A, H199A, H288A, H198A, H267A, H267N, H268A, H388X,...7.5 High
- phpseclibphpseclib: CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID()7.5 High
@evomap/evolvernpm@evomap/evolver has an unbounded request body in proxy /asset/submit that causes persistent disk-exhaustion DoS6.2 Medium- twistedTwisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains7.5 High
- apache thriftApache Thrift: Node.js web_server.js multi-vulnerability7.3 High
- prometheus, red hat file integrity operator, logging for red hat openshift 6 +53 more +55 morePrometheus: remote read endpoint allows denial of service via crafted snappy payload7.5 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +2 moreAn integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a...7.5 High
- red hat enterprise linux 10, enterprise linux 9 +1 moreAn issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the...5.9 Medium
- red hat enterprise linux 10, enterprise linux 9 +1 moreAn issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the...7.5 High
- apache neethiApache Neethi: Policy Normalization Unbounded Resource Allocation DoS7.5 High
- apache neethiApache Neethi: Circular Policy Reference Infinite Loop7.5 High
- No product listedAn issue was discovered in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe ...7.5 High
- absolute secure accessMemory corruption in Secure Access Windows clients prior to 14.506.8 Medium
- u-speed n300 firmwareA denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a...7.5 High
- dbitnet dbit n300 t1 pro firmwareDbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via...7.5 High
- No product listedAn issue in open5gs v.2.7.3 allows a remote attacker to cause a denial of service via a crafted...7.5 High
- phpoffice phpspreadsheetPhpSpreadsheet: CPU Denial of Service via Unbounded Row Number in XLSX Row Dimensions7.5 High
- phpoffice phpspreadsheetPhpSpreadsheet: CPU Denial of Service via Unbounded Row Index in SpreadsheetML XML Reader7.5 High
- wazuhWazuh: Pre-auth stack-based buffer overflow in wazuh-remoted print_hex_string() due to signed char promotion on x86_646.5 Medium
- vmware spring frameworkCVE-2026-22745 : Denial of service in static resource handling on Windows platforms5.3 Medium
- vmware spring frameworkSpring Framework DoS with Multipart Temp Files in WebFlux6.5 Medium
- opentelemetry opentelemetry.exporter.zipkin, open-telemetry opentelemetry-dotnet +1 moreOpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth5.3 Medium
- corednsCoreDNS DoH GET path missing size validation causes CPU and memory amplification8.7 High
- spring ai, vmware spring ai +1 moreSpring AI Vulnerable to OOM by attacker-controlled PDF6.5 Medium
- mercurycom mipc252w firmwareA handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows...4.4 Medium
- No product listedAn issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows...7.5 High
- marked project markedMarked: OOM Denial of Service via Infinite Recursion in marked Tokenizer8.7 High
- grafana tempo, enterprise traces (get), red hat logging subsystem for red hat openshift +13 more +15 moreTempo query limit results in unbounded memory allocation7.5 High
- opensource-socialnetworkOpen Source Social Network (OSSN) Vulnerable to Resource Exhaustion via Malicious Image Processing8.2 High
- No product listedAn issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of...5.3 Medium
- No product listedAn issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of...3.8 Low
- uutils coreutilsuutils coreutils mv Denial of Service and Data Duplication via Improper Symlink Expansion6.6 Medium
- uutils coreutilsuutils coreutils cp Semantic Loss and Potential Denial of Service with -R via Device Node Stream Reading4.4 Medium
- powerdns authoritativePossible file descriptor exhaustion in forward-dnsupdate5.9 Medium
- gnu binutils, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreBinutils: binutils: denial of service vulnerabilities in readelf via crafted elf files5.5 Medium
- progress telerik ui for asp.net ajaxUncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX7.5 High
- tanium interactTanium addressed an uncontrolled resource consumption vulnerability in Interact.2.7 Low
- free5gc, free5gc pcf +1 morefree5GC PCF: Memory Leak via CORS Middleware Registration in HTTP Handler Leads to Denial of Service7.5 High
- sanluan publiccmsSanluan PublicCMS DocToHtmlUtils.java ZipSecureFile.setMinflateRatio resource consumption5.3 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported...6.5 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...6.5 Medium
- Show moreLoading…