CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- nodejs undici, red hat cluster observability operator 1.5.0, cryostat 4 +25 more +27 moreundici WebSocket client vulnerable to denial of service via fragment count bypass7.5 High
- containerdcontainerd image-triggered runtime DoS via unbounded group parsing5.3 Medium
- google androidIn PackageInstaller.Session#transfer of frameworks/base/services/core/java/com/android/server/pm...10.0 Critical
- google androidIn multiple places, there is a possible persistent denial of service due to resource exhaustion....10.0 Critical
- oracle solarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The...7.1 High
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:...9.1 Critical
- oracle enterprise manager base platformVulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager...8.2 High
- oracle mysql cluster, mysql server +1 moreVulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:...7.5 High
- oracle mysql routerVulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). ...7.5 High
- py-pdf pypdfpypdf: Possible large memory usage for form XObjects during text extraction6.9 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Graphics: ImageLib component6.5 Medium
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Audio/Video: Playback component6.5 Medium
- markdown-itmarkdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations5.3 Medium
- fastapiexpert python-multipartPython-Multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service7.5 High
- faisalman ua-parser-jsUAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`5.3 Medium
- broadcom spring cloud sleuth, spring cloud sleuth +1 moreSpring Cloud Sleuth instrumentation of Spring TX DoS vulnerability7.5 High
- nodemailerNodemailer before 9.1.0 Denial of Service via addressparser8.7 High
- angularAngular: Denial of Service (DoS) via OOM in Date Formatting (formatDate)8.2 High
- angularAngular: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)8.2 High
- websockets ws, red hat cluster observability operator 1.5.0, cryostat 4 +46 more +48 morews: Memory exhaustion DoS from tiny fragments and data chunks7.5 High
- expressjs multermulter vulnerable to Denial of Service via deeply nested field names7.5 High
- bytecodealliance wasmtimeWasmtime: Leak in WASIp1 `fd_renumber` implementation2.3 Low
- lldapAn input handling flaw in the HTTP refresh token process of LLDAP v0.6.2 allows attackers to...7.5 High
- No product listedAn issue in the /api/v0/pastes endpoint of anna-is-cute paste v0.1.1 allows attackers to cause a...7.5 High
github.com/andreimarcu/linx-serverGo,govulncheck-vulndbopenSUSE +1 morelinx-server has an issue in the uploadPostHandler component that allows attackers to cause a Denial of Service (DoS) via a crafted POST request7.5 High- No product listedAn issue in the attachment handling component of Feuerhamster MailForm v1.1.0 allows attackers to...7.5 High
- No product listedAn issue in the /util/http/prelude.rs endpoint of Datadog, Inc Vector v0.54.0 allows attackers to...6.5 Medium
- filebrowserFile Browser: DoS Vulnerability on Public Login API6.5 Medium
github.com/apple/swift-nioSwiftURLSwiftNIO NIOHTTP1: HTTPDecoder accepts unbounded HTTP/1 header blocks, enabling remote DoS8.7 High- apache cxfApache CXF: No restriction on attachment headers per message7.5 High
- cyberark software, a palo alto networks company pam sh vault, paloaltonetworks idira privileged access manager vault +1 moreIdira Privileged Access Manager (PAM) Self-Hosted Vault: Denial of Service due to Unexpected Input Processing8.7 High
- basekick-labs arcArc: Unauthenticated access to Go debug pprof endpoints leaks runtime state and enables CPU-burn DoS8.8 High
- paulsm zeroconf, python-zeroconf +1 moreZeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood6.5 Medium
- grpc grpc-node@grpc/grps-js: An incoming malformed compressed message can cause a client or server crash7.5 High
- hapijs joijoi: Uncaught RangeError on deeply nested input through recursive `link()` schemas5.3 Medium
- vllm, vllm-project vllm-project/vllm, red hat ai inference server +2 more +4 moreUnbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllm7.5 High
- dana powers kafka-python, red hat quay 3.10, quay 3.12 +3 more +5 morekafka-python prior to 2.3.2 DoS via SCRAM Iteration Count in scram.py8.7 High
- cometdCometD has acknowledgement extension out of memory7.5 High
- broadcom spring data commons, spring data commons +1 moreSpring Data Commons Denial of Service via Data Binding5.9 Medium
- broadcom spring data commons, spring data commons +1 morePotential Denial of Service through crafted Sort Parameters5.9 Medium
- broadcom spring data commons, spring data commons +1 moreDenial of Service in Spring Data Commons Property Path Resolution7.5 High
- spring security, vmware spring security +1 moreUnbounded DEFLATE Inflation in SAML 2.0 Service Provider7.5 High
- adobe c2pa, c2pa-web, content credentials js sdk +1 more +3 moreCAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)6.2 Medium
- adobe c2pa, c2pa-web, content credentials js sdk +1 more +3 moreCAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)6.2 Medium
- adobe c2pa, c2pa-web, content credentials js sdk +1 more +3 moreCAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)6.2 Medium
- adobe c2pa, c2pa-web, content credentials js sdk +1 more +3 moreCAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 moreHTTP.sys Denial of Service Vulnerability7.5 High
- freeswitchFreeSWITCH: Pre-authentication bandwidth amplification via `mod_verto` speed-test frames7.5 High
- elixir-lang elixirUnbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service5.1 Medium
- redhat 389 directory server, directory server, red hat directory server 11 +8 more +10 more389-ds-base: 389-ds-base: pbkdf2 password storage plugin unbounded iteration count denial of service4.9 Medium
- Show moreLoading…