CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- linux, linux kernel +1 morescsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues7.5 High
- linux, linux kernel +1 moreBluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close8.8 High
- linux, linux kernel +1 moreKVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()7.1 High
- apache traffic serverApache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditions7.5 High
- oisf suricataSuricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages7.5 High
- oisf suricataSuricata dhcp: unbounded transactions in unidirectional traffic can lead to resource exhaustion6.5 Medium
- ibm powervm novalinkVulnerabilities in IBM WebSphere Application affects IBM PowerVM Novalink.7.5 High
- mattermost, mattermost desktop +1 moreMattermost Desktop App crashes when malformed arguments are provided to some exposed IPC methods5.7 Medium
- wazuhWazuh: Unauthenticated cluster packet length leads to uncontrolled memory allocation (remote DoS)6.5 Medium
- h2oh2o has HTTP/2 state amplification7.5 High
- h2o quiclyQuicly: Remote Denial of Service via assertion failure when CRYPTO stream handshake data exceeds 32KB7.5 High
- h2o quiclyQuicly is vulnerable to memory exhaustion5.3 Medium
- anthropics buffaBuffa: Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded Allocation6.3 Medium
- microsoft ufoMicrosoft UFO: COMMAND_RESULTS handler creates unowned sessions, allowing authenticated session-squatting denial of service6.5 Medium
adawolfa/isdocPackagistadawolfa/isdoc: Uncontrolled resource consumption (decompression bomb) when reading untrusted ISDOCX or PDF files6.5 Medium- pomeriumPomerium: Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callback7.5 High
- datadog dd-trace-rbdd-trace-rb: Improper parsing of W3C baggage headers may lead to DoS7.5 High
- datadog dd-trace-godd-trace-go: Improper parsing of W3C baggage headers may lead to DoS7.5 High
- datadog dd-trace-dotnetDatadog .NET Tracer: Improper parsing of W3C baggage headers may lead to DoS7.5 High
- datadog dd-trace-jsdd-trace: Improper parsing of W3C baggage headers may lead to DoS7.5 High
- datadog dd-trace-pydd-trace-py: Improper parsing of W3C baggage headers may lead to DoS7.5 High
- datadog dd-trace-java, com.datadoghq dd-java-agent +1 moredd-trace-java: Improper parsing of W3C baggage headers may lead to DoS7.5 High
- faye websocket-driver, websocket-driver-ruby +1 morewebsocket-driver: Memory exhaustion in HTTP header parser6.3 Medium
- faye websocket-driver, websocket-driver-ruby +1 morewebsocket-driver: Memory exhaustion via abuse of protocol length headers6.9 Medium
- wekanWekan: Arbitrary file read and server DoS via attachment versions.original.path7.1 High
- absolute secure accessResource exhaustion vulnerability in the Secure Access publisher5.1 Medium
- absolute secure accessMemory management vulnerability in Secure Access clients6.9 Medium
- absolute secure accessMemory management vulnerability in Secure Access servers8.7 High
- absolute secure accessMemory management vulnerability in Secure Access servers6.9 Medium
- absolute secure accessMemory management error in Secure Access servers prior to 14.557.1 High
- emqx nanomqAn issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the...7.5 High
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)6.2 Medium
- symfony twigTwig: Sandbox resource exhaustion via unbounded `for` / `range()`7.1 High
- forgekeep nebula-meshnebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting5.3 Medium
- nvidia triton inference serverNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause...7.5 High
- nvidia triton inference serverNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause...7.5 High
- stackloklabs mkpMKP: Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory Exhaustion7.5 High
- spectolabs hoverflyHoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Server Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability6.5 Medium
- microsoft azure active directory, .net framework, .net framework 3.5 +6 more +8 moreAzure Active Directory Denial of Service Vulnerability7.5 High
- pyasn1pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs7.5 High
- pyasn1pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service7.5 High
- pyasn1pyasn1: Uncontrolled resource consumption when converting decoded REAL values7.5 High
- python pillowPillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()7.5 High
- cloudflare quicheResource exhaustion in quiche HTTP/3 and QPACK layers7.5 High
- eclipse jettyEclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests7.5 High
- hedgedocHedgeDoc: Denial-of-service via YAML alias expansion in note frontmatter8.3 High
- No product listedA Denial of Service (DoS) vulnerability exists in the receive loop of libmodbus 3.1.12 when...7.5 High
- zephyrproject zephyrHost-triggerable control-endpoint wedge (DoS) in Nuvoton NuMaker HSUSBD UDC driver2.4 Low
- Show moreLoading…