CWE-407: Inefficient Algorithmic Complexity
An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.
Also known as Quadratic Complexity.
A kind of CWE-405 Asymmetric Resource Consumption (Amplification).
From the CWE List. © The MITRE Corporation.
Newest
- encode starletteStarlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse7.5 High
- go standard library crypto/x509, golang go +1 moreQuadratic complexity when checking name constraints in crypto/x5097.5 High
- go html, golang.org/x/net golang.org/x/net/html +1 moreQuadratic parsing complexity in golang.org/x/net/html5.3 Medium
- haproxy, haproxy aloha appliance, enterprise +2 more +4 moreDenial of service vulnerability in HAProxy mjson library7.5 High
- exiv2Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata1.8 Low
- nodejs nodeThe V8 release used in Node.js v24.0.0 has changed how string hashes are computed using rapidhash...7.5 High
- mjson project mjsonmystrtod in mjson 1.2.7 requires more than a billion iterations during processing of certain...2.9 Low
- netty netty-incubator-codec-quicNetty QUIC hash collision DoS attack5.3 Medium
- qtencodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and...5.8 Medium
- litespeedtech lsquicA hash collision vulnerability (in the hash table used to manage connections) in LSQUIC (aka...5.3 Medium
- privateoctopus picoquicThe hash table used to manage connections in picoquic before b80fd3f uses a weak hash function,...5.3 Medium
- ptrd kwikKwik hash collision vulnerability5.3 Medium
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +20 more +22 moreGnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos5.3 Medium
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +26 more +28 moreLibtasn1: inefficient der decoding in libtasn1 leading to potential remote dos5.3 Medium
- gitlabInefficient Algorithmic Complexity in GitLab7.5 High
- gitlabInefficient Algorithmic Complexity in GitLab4.3 Medium
- gitlabInefficient Algorithmic Complexity in GitLab7.5 High
- thephpleague commonmarkleague/commonmark before 2.6.0 Denial of Service via Quadratic Complexity8.7 High
- gitlabInefficient Algorithmic Complexity in GitLab4.3 Medium
- gitlabInefficient Algorithmic Complexity in GitLab5.3 Medium
- gitlabInefficient Algorithmic Complexity in GitLab6.5 Medium
- cisco email security appliance, secure email +1 moreCisco Email Security Appliance Denial Of Service Vulnerability5.3 Medium
- microsoft .net, .net 6.0, .net 8.0 +8 more +10 more.NET and Visual Studio Denial of Service Vulnerability7.5 High
- microsoft .net, .net framework, .net 6.0 +19 more +21 more.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability7.5 High
- microsoft .net, .net framework, .net 6.0 +19 more +21 more.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability7.5 High
- openrestyIn lj_str_hash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function (used during...5.9 Medium
- dormakaba confidant firmware, quantum firmware, saffire firmware +2 more +4 moreThe dormakaba Saflok system before the November 2023 software update allows an attacker to unlock...5.6 Medium
- isc bind, bind 9, fedoraproject fedora +1 more +3 moreParsing large DNS messages may cause excessive CPU load7.5 High
- pallets werkzeugWerkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning8.0 High
commonmarkerRubyGemsSeveral quadratic complexity bugs may lead to denial of service in CommonmarkerNo score- owasp modsecurityTrustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity.7.5 High
- py-pdf pypdfQuadratic runtime with malformed PDF missing xref marker in pypdf6.2 Medium
- iteachyou dreamer cmsDreamer CMS Password Hash Calculation UserController.java updatePwd algorithmic complexity4.3 Medium
- github cmark-gfmQuadratic complexity may lead to a denial of service in cmark-gfm5.3 Medium
- github cmark-gfmQuadratic complexity may lead to a denial of service in cmark-gfm5.3 Medium
- redisRedis string pattern matching can be abused to achieve Denial of Service5.5 Medium
- github cmark-gfmcmark-gfm Quadratic complexity bug in handle_close_bracket may lead to a denial of service3.5 Low
- github cmark-gfmInefficient Quadratic complexity bug in handle_pointy_brace may lead to a denial of service3.5 Low
- github cmark-gfmcmark-gfm Quadratic complexity bugs may lead to a denial of service3.5 Low
- pmmp pocketmine-mpPocketMine-MP before 4.12.5 Denial of Service via ModalFormResponsePacket5.3 Medium
- python, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 High
- nic knot resolver, debian linux, fedoraproject fedora +2 moreKnot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption)...7.5 High
- github cmark-gfm, fedoraproject fedora +1 moreUncontrolled Resource Consumption in cmark-gfm7.5 High
- peteroupc cborDenial of service in CBOR library7.5 High
- peteroupc cborupokecenter CBOR Denial of Service7.5 High
- juniper junos, juniper networks junos os +1 moreSRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops7.5 High
- reddit snudownHash-Collision Denial-of-Service Vulnerability in snudown6.5 Medium
- cyrus imap, debian linux, fedoraproject fedora +2 moreCyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute...7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, apache nifi +14 more +16 moreDOS vulnerability for Quoted Quality CSV headers5.2 Medium
- cz.nic knot-resolver, debian linux, nic knot resolver +2 moreknot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU...7.5 High
- Show moreLoading…