CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- sqlfluffSQLFluff: Uncontrolled Resource Consumption in Parser7.5 High
- libp2p js-libp2plibp2p: Unvalidated PUT_VALUE records allow unbounded disk exhaustion on DHT server nodes7.5 High
- setasign fpdiFPDI: Memory Exhaustion and Endless Loop in FPDI leads to Denial of Service6.0 Medium
- axllent mailpitMailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes7.5 High
- significant-gravitas autogptAutoGPT: Unauthenticated DoS via Disk Space Exhaustion7.5 High
- mozilla firefox, thunderbird +1 moreDenial-of-service due to invalid pointer in the Audio/Video: Web Codecs component7.5 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion7.5 High
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Policy Bypass in MNG coder could5.3 Medium
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU5.9 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Policy Bypass in PSD decoder5.3 Medium
- hamba avro, red hat cryostat 4 on rhel 9, multicluster global hub 1.4.5 +11 more +13 moreiskorotkov/avro: CPU Exhaustion in Avro Decoder8.7 High
github.com/hamba/avro/v2Go,github.com/iskorotkov/avro/v2Go +1 moreiskorotkov/avro: Denial-of-Service Vulnerability in Decoder8.7 High- No product listedIn tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), the broker mishandles...7.5 High
- vercel aivercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption5.3 Medium
smtp-servernpmsmtp-server's command parser memory exhaustion denial-of-service7.5 High- element synapseSynapse CPU starvation (Denial of Service)6.8 Medium
- grafana, grafana oss +1 moreGrafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro6.5 Medium
- wger-project wgerwger before 2.5 Uncontrolled Resource Consumption via date_sequence7.1 High
- nautobotNautobot: Object bulk rename UI actions vulnerable to denial of service by crafted regular expression (REDoS)6.5 Medium
- deskflowDeskflow: TLS multiplexer DoS on failed `SSL_accept`7.5 High
- adobe c2pa, c2pa-web, content credentials js sdk +1 more +3 moreCAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)6.2 Medium
- adobe c2pa, c2pa-web, content credentials js sdk +1 more +3 moreCAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)6.2 Medium
- adobe c2pa, c2pa-web, content credentials js sdk +1 more +3 moreCAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)7.5 High
- adobe c2pa, c2pa-web, content credentials js sdk +1 more +3 moreCAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)6.2 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)7.5 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)7.5 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)7.5 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)7.5 High
- arubanetworks arubaos, sd-wan, hewlett packard enterprise (hpe) hpe aruba networking wireless operating system (aos) +2 moreUnauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component7.5 High
- gitlawb openclaudeOpenClaude's MCP OAuth Callback: State Check Bypass via error Param Leads to DoS6.5 Medium
- dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +14 more +16 moreAn attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE...4.3 Medium
- dovecot, open-xchange gmbh ox dovecot pro +1 moreAttacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass...5.3 Medium
- apple ipados, macos, tvos +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and...6.2 Medium
- apple ipados, ios and ipados, iphone os +2 moreA resource exhaustion issue was addressed with improved input validation. This issue is fixed in...7.5 High
- apple ipados, ios and ipados, iphone os +2 moreA denial-of-service issue was addressed with improved input validation. This issue is fixed in...4.9 Medium
- apple macosA denial of service issue was addressed by removing the vulnerable code. This issue is fixed in...7.5 High
- aiwaves-cn agentsaiwaves-cn agents cheshire_cat_core stray_cat.py recall_relevant_memories_to_working_memory resource consumption6.9 Medium
- ninenines cowlibUnbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS8.7 High
- xddxdd bird-lg-gobird-lg-go: Fatal Out-of-Memory (OOM) Denial of Service via Unbounded JSON Decoding7.5 High
- wso2 identity server, carbon magiclink authenticator module +1 moreDenial-of-Service via Magic Link Authentication in WSO2 Identity Server Allows Service Unavailability8.6 High
doclingPyPIDocling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks7.5 High- open5gsOpen5GS UPF gtp-path.c _gtpv1_u_recv_cb resource consumption6.9 Medium
- labring fastgptFastGPT: Uncontrolled Resource Consumption leading to Sandbox Exhaustion6.3 Medium
- anzory solidcam-gppl-ideSolidCAM-GPPL-IDE: XML External Entity (XXE) and billion-laughs DoS in VMID parser7.1 High
- linuxfoundation volcanoVolcano: Webhook server vulnerable to OOM due to unbounded HTTP request body size6.8 Medium
- emilstenstrom justhtmljusthtml before 1.18.0 Denial of Service via CSS Selector8.7 High
- gpacGPAC box_code_base.c sidx_box_read allocation of resources4.8 Medium
- fohrloop dash-uploaderAn issue in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute...7.5 High
- No product listedMikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to cause a...7.5 High
- No product listedThe socket connection handler in aswArPot.sys in the Avast and AVG Windows Anti Rootkit driver...5.3 Medium
- Show moreLoading…