CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- openstack image registry and delivery service \(glance\)OpenStack Glance Denial of service by creating a large number of images4.0 Medium
- plonePlone is vulnerable to denial of service5.0 Medium
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreDjango Denial-of-service possibility with strip_tags5.0 Medium
- djangoproject django, canonical ubuntu linux +1 moreDjango database denial-of-service with ModelMultipleChoiceField5.0 Medium
- erlang-solutions mongooseimErlang Solutions MongooseIM vulnerable to denial of service (DoS) via crafted XMPP stream7.8 High
- openstack computeOpenStack Nova VMWare driver leaks rescued images2.3 Low
- openstack folsom, grizzly, havana +2 moreOpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image2.1 Low
- openstack essex, folsom, grizzly +1 more +3 moreOpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function4.0 Medium
- apache http server, portable runtime, apple mac os x +7 more +9 moreStack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache...4.3 Medium
- g.rodola pyftpdlibpyftpdlib vulnerable to allocation of resources without limits4.0 Medium
- php, apple mac os x, debian linux +2 morePHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created...5.0 Medium
- cisco unified communications managerCisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6...7.8 High
- digium asterisk, s800i firmware +1 moreThe SIP channel driver in Asterisk Open Source 1.2.x before 1.2.34, 1.4.x before 1.4.26.1, 1.6.0...7.8 High
- opera browserOpera, possibly 9.64 and earlier, allows remote attackers to cause a denial of service (memory...4.3 Medium
- microsoft office communicatorMicrosoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers...5.0 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreThe ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the...5.0 Medium
- interwoven worksite webThe Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2,...7.1 High
- joomla joomla\!Joomla! 1.03 does not restrict the number of "Search" Mambots, which allows remote attackers to...5.0 Medium
- apache tomcatApache Tomcat Vulnerable to Denial of Service (DoS) via Simultaneous Requests5.0 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora core +3 more +5 moreMemory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote...5.0 Medium
- netfilter iptablesiptables before 1.2.4 does not accurately convert rate limits that are specified on the command...5.0 Medium