CWE-405: Asymmetric Resource Consumption (Amplification)
The product does not properly control situations in which an adversary can cause the product to consume or produce excessive resources without requiring the adversary to invest equivalent work or otherwise prove authorization, i.e., the adversary's influence is "asymmetric."
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- sap se netweaver (remote service for xcelsius)Denial of service (DOS) in SAP NetWeaver (remote service for Xcelsius)7.9 High
- sap se sapui5 framework (markdown-it component)Denial of Service (DoS) in SAPUI5 framework (Markdown-it component)5.9 Medium
- linuxfoundation sigstore timestamp authority, sigstore timestamp-authority +1 moreSigstore Timestamp Authority allocates excessive memory during request parsing7.5 High
- linuxfoundation fulcioFulcio allocates excessive memory during token parsing7.5 High
- zabbix frontend, zabbix +1 moreFrontend DoS vulnerability due to asymmetric resource consumption6.0 Medium
- isc bind 9Resource exhaustion via malformed DNSKEY handling7.5 High
- atlassian confluence data center, confluence server +1 moreThis High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of...8.3 High
- netapp storagegridCVE-2025-26516 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)5.3 Medium
- hcl software connections docsHCL Connections Docs is vulnerable to a Denial of Service (DoS) attack4.8 Medium
github.com/apple/swift-nio-http2SwiftURLswift-nio-http2 affected by HTTP/2 MadeYouReset vulnerability6.3 Medium- ctfer-io chall-managerChall-Manager's scenario decoding process does not check for zip bombs8.7 High
- ruby net-imap, ruby-lang net\ +1 morenet-imap rubygem vulnerable to possible DoS by memory exhaustion6.0 Medium
- golang-jwt jwtjwt-go allows excessive memory allocation during header parsing7.5 High
- ruby net-imapNet::IMAP vulnerable to possible DoS by memory exhaustion6.5 Medium
- isc bind 9Many records in the additional section cause CPU exhaustion7.5 High
- fastd project fastdUDP traffic amplification via fastd's fast reconnect feature6.9 Medium
- oisf suricataSuricata oversized resource names utilizing DNS name compression can lead to resource starvation7.5 High
- nexryai altairUncontrolled Recursion and Asymmetric Resource Consumption in Altair media/file proxy8.6 High
- misskey-dev misskeyUncontrolled Recursion and Asymmetric Resource Consumption (Amplification) in media/file proxy in Misskey7.4 High
- body-parserbody-parser vulnerable to denial of service when url encoding is enabled7.5 High
- ibm infosphere information serverIBM InfoSphere Information Server denial of service6.5 Medium
- randombit botanBotan has a Denial of Service Due to Excessive Name Constraints5.3 Medium
- ibm mq operatorIBM MQ Container denial of service5.9 Medium
- randombit botanBotan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters7.5 High
- python cpythonQuoted zip-bomb protection for zipfile6.2 Medium
- naver ngrindernGrinder before 3.5.9 allows to set delay without limitation, which could be the cause of Denial...2.7 Low
- lenovo fan power controller (fpc), nextscale n1200 enclosure firmware, system management module (smm) +8 more +10 moreAn unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC...7.5 High
- typo3TYPO3 subject to Uncontrolled Recursion resulting in Denial of Service5.9 Medium
- objectcomputing openddsOCI OpenDDS Secure Amplification8.6 High
- pterodactyl wingsAsymmetric Resource Consumption (Amplification) in Docker containers created by Wings6.5 Medium
- typo3, typo3 typo3.cms +1 moreDenial of Service in Page Error Handling5.9 Medium
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +18 more +20 moreJonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This...5.3 Medium
- gemalto sentinel license managerA vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 (fixed...7.5 High