CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- cisco firepower extensible operating system, fxos, nx-os +2 moreA vulnerability in the authentication, authorization, and accounting (AAA) implementation of...8.6 High
- gnu binutils_bfd_elf_slurp_version_tables in elf.c in the Binary File Descriptor (BFD) library (aka libbfd),...5.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in coders/sun.c.6.5 Medium
- google androidA denial of service vulnerability in the Android media framework (libskia). Product: Android....5.5 Medium
- cisco connected grid network management system, iot field network director +1 moreA vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND)...7.5 High
- libzip, debian linux +1 moreThe _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreThe ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreThe ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreThe ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause...6.5 Medium
- onosproject onosONOS vulnerable to denial of service due to unrestricted NettyMessagingManager payload7.5 High
- imagemagickThe WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a...6.5 Medium
- gnu binutilsThe C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29...5.5 Medium
- imagemagickIn ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which...6.5 Medium
- google android, qualcomm, inc. all qualcomm products +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can...7.8 High
- libtiffThe TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation...7.5 High
- google androidA denial of service vulnerability in the Android media framework (libskia). Product: Android....5.5 Medium
- imagemagick, debian linux +1 moreImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c.6.5 Medium
- imagemagickIn ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadSUNImage...7.5 High
- imagemagickIn ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMPCImage...7.5 High
- imagemagickIn ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMIFFImage...7.5 High
- ytnef project ytnefIn ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which...5.5 Medium
- gnu glibcThe DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS...5.9 Medium
- hclsoftware bigfix platformIBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash...7.5 High
- docker registry, redhat enterprise linux server +1 moreDocker Registry has Allocation of Resources Without Limits or Throttling7.5 High
- imagemagickThe ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1...6.5 Medium
- cisco elastic services controllerA vulnerability in the Play Framework of Cisco Elastic Services Controller (ESC) could allow an...9.8 Critical
- gnu gdbGNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A...5.5 Medium
- cisco prime data center network managerA vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an...9.8 Critical
- wiresharkIn Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust...7.5 High
- cisco identity services engineA vulnerability in the TCP throttling process for the GUI of the Cisco Identity Services Engine ...7.5 High
- cisco remote expert managerA vulnerability in the TCP connection handling functionality of Cisco Remote Expert Manager...7.5 High
- gnu binutilsGNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a...5.5 Medium
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator...7.0 High
- libtirpc project libtirpc, ntirpc project ntirpc, rpcbind project rpcbind +2 morerpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through...7.5 High
- oracle ireceivablesVulnerability in the Oracle iReceivables component of Oracle E-Business Suite (subcomponent: Self...7.5 High
- php** DISPUTED ** The GNU Multiple Precision Arithmetic Library (GMP) interfaces for PHP through 7.1...7.5 High
- sap sso authentication librarySAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial...7.5 High
- openbsdhttpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a...7.5 High
- libimobiledevice libplistlibplist allows attackers to cause a denial of service (large memory allocation and crash) via...7.5 High
- netpbmA memory allocation vulnerability was found in netpbm before 10.61. A maliciously crafted SVG...3.3 Low
- red hat spice, debian linux, redhat enterprise linux desktop +4 more +6 moreA vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An...7.5 High
- mozilla firefoxA STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used...7.5 High
- python priority librarypriority vulnerable to denial of service7.5 High
- qemu, debian linux, opensuse leap +2 more +4 moreThe xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest...6.0 Medium
- jq project jqThe jv_dump_term function in jq 1.5 allows remote attackers to cause a denial of service (stack...7.5 High
- djangoproject django, canonical ubuntu linux, oracle solaris +2 moreDjango denial of service via empty session record creation5.0 Medium
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango Denial-of-service by filling session store7.8 High
- openstack image registry and delivery service \(glance\)OpenStack Glance Denial of service by creating a large number of images4.0 Medium
- Show moreLoading…