CWE-400: Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Also known as Resource Exhaustion.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- jackh54 voicesentinelVoiceSentinel: Race condition in report buffer cleanup can corrupt transcript data and cause unbounded disk growth8.2 High
- espressif esp-protocolsespressif/mdns has Uncontrolled Recursion in mDNS Name Decompression6.5 Medium
- elixir-lang elixirUnbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir6.3 Medium
- cloud foundry uaa, cf-deployment +1 moreDoS Vulnerability in UAA Related to JWKS URI Handling6.9 Medium
- No product listedBitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.5.3 Medium
- No product listedAn issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of...7.5 High
- red hat enterprise linux 10, enterprise linux 10.2 extended update support, enterprise linux 6 +4 more +6 moreGlib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service7.5 High
- graphql-python graphql-coreGraphQL-core: Denial of service via memory leak in aborted validations7.5 High
- authlib joserfcjoserfc: Compact JWS size guard allocates attacker-controlled segments before rejection6.9 Medium
- authlib joserfcjoserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption7.5 High
- py-pdf pypdfpypdf: Possible large memory usage when parsing cross-reference streams7.1 High
- py-pdf pypdfpypdf: Possible long runtimes/large memory usage for encrypted PDF files7.1 High
- py-pdf pypdfpypdf: Possible large memory usage for exceptions in strict mode7.1 High
- py-pdf pypdfpypdf: Possible long runtimes when retrieving page labels7.1 High
- py-pdf pypdfpypdf: Possible large memory usage when parsing page tree7.1 High
- digitalbazaar forgeForge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer7.5 High
- isaacs node-globGlob: AbortSignal cancellation bypass allows post-timeout filesystem traversal6.3 Medium
twistedPyPITwisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset7.5 High- rgrove crassCrass: Non-ASCII characters cause superlinear CPU consumption6.3 Medium
- rgrove crassCrass: Deeply nested CSS blocks and functions can trigger a SystemStackError or excessive memory usage6.3 Medium
- daptinDaptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware8.7 High
- progress software ws ftp serverUnauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server5.3 Medium
- red hat ceph storage 9, enterprise linux 10, enterprise linux 6 +7 more +9 moreDnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation5.3 Medium
- nipy nibabelnipy nibabel Header volumeutils.py array_from_file memory allocation6.9 Medium
- nschloe meshionschloe meshio VTK Reader _vtk_42.py memory allocation6.9 Medium
- samverschueren decode-uri-componentdecode-uri-component: Denial of service via quadratic replacement of percent-encoded runs8.2 High
- grafana oss, enterprise +1 moreServer-side expression parser denial of service6.5 Medium
- apache software foundation kafkaApache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches6.5 Medium
- apache software foundation kafkaApache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocation7.5 High
- apache software foundation kafkaApache Kafka: Broker OutOfMemoryError via array allocation amplification in code-generated protocol readers9.1 Critical
- apache software foundation kafkaApache Kafka: PushTelemetry (KIP-714) metrics payloads are decompressed without a size limit, allowing a broker out-of-memory denial of service6.5 Medium
- a2ui-project a2uia2ui-project a2ui Parser expression_parser.ts formatString resource consumption5.1 Medium
- a2ui-project a2uia2ui-project a2ui Resolver data-context.ts DataContext.resolveSignal resource consumption6.9 Medium
- a2ui-project a2uia2ui-project a2ui Binder generic-binder.ts resource consumption5.3 Medium
- a2ui-project a2uia2ui-project a2ui data-model.ts DataModel.set resource consumption5.3 Medium
- a2ui-project a2uia2ui-project a2ui data-context Resolver data-context.ts resource consumption5.3 Medium
- No product listedAn integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack v0.11.0 allows...7.5 High
- eugeny russhrussh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)4.3 Medium
- tanium enforceTanium addressed an uncontrolled resource consumption vulnerability in Enforce.7.5 High
- tanium endpoint configuration toolset solution, threat-response-cx +1 moreTanium addressed an infinite loop vulnerability in Threat Response Client Extension.3.3 Low
- devolutions serverAbusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. These rows persist indefinitely — there is no automatic cleanup mechanism. Three d…7.5 High
- a2aproject a2a-javaa2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption5.3 Medium
- a2aproject a2a-javaa2aproject a2a-java ChildQueue queue.offer resource consumption5.3 Medium
- mozilla firefox, thunderbird +1 moreFrame poisoning in the CSS Parsing and Computation component5.4 Medium
- a2aproject a2a-goa2aproject a2a-go REST SSE handler rest.go resource consumption6.9 Medium
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity8.7 High
- wolfvision cynap pro, cynap core pro, cynap pure, cynap pure mini, cynap pure pro, cynap pure (next gen), cynap videobar +1 more +3 moreResource Exhaustion in MICE Service6.9 Medium
- tornadoweb tornadoTornado: Event loop blocking and excess memory use from chunked bodies with many small chunks5.3 Medium
- esri arcgis serverBUG-000186514 - ArcGIS Server has a security vulnerability.7.5 High
- vllmvLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs6.5 Medium
- Show moreLoading…