CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- golang go, debian linux, opensuse leap +2 moreGo before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which...8.2 High
- cisco iot field network director (iot-fnd), iot field network director +1 moreCisco IoT Field Network Director Resource Exhaustion Denial of Service Vulnerability7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Crafted HTTP traffic may cause UTM to consume all mbufs, leading to Denial of Service7.5 High
- juniper junosOn EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform...5.3 Medium
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreIt was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial...6.5 Medium
- cisco asyncos, email security appliance (esa) +1 moreCisco Email Security Appliance URL Filtering Denial of Service Vulnerability8.6 High
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Disk Utilization Denial of Service Vulnerability5.3 Medium
- systemd, canonical ubuntu linux, debian linux +8 more +10 moreAn allocation of memory without limits, that could result in the stack clashing with another...7.5 High
- systemd, canonical ubuntu linux, debian linux +8 more +10 moreAn allocation of memory without limits, that could result in the stack clashing with another...7.4 High
- axiosys bento4An issue was discovered in Bento4 1.5.1-627. The AP4_StcoAtom class in Core/Ap4StcoAtom.cpp has...6.5 Medium
- tinyexr project tinyexrAn attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in...6.5 Medium
- ethereum go ethereumGo Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption)...7.5 High
- axiosys bento4An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4...6.5 Medium
- ibm api connectIBM API Connect 2018.1 through 2018.3.7 could allow an unauthenticated attacker to cause a denial...7.5 High
- [unknown] glusterfs, debian linux, redhat enterprise linux server +2 more +4 moreA flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated...6.5 Medium
- cisco integrated management controller supervisor, unified computing system director +1 moreCisco Integrated Management Controller Supervisor and Cisco UCS Director System Resources Denial of Service Vulnerability6.5 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance TCP Syslog Denial of Service Vulnerability6.8 Medium
- cisco adaptive security appliance (asa) software, firepower threat defense, adaptive security appliance software +1 more +3 moreCisco Adaptive Security Appliance Direct Memory Access Denial of Service Vulnerability7.5 High
- cisco ios software, ios, ios xe +2 moreCisco IOS and IOS XE Software Cisco Discovery Protocol Denial of Service Vulnerability7.4 High
- ibm qradar incident forensicsIBM QRadar Incident Forensics 7.2 and 7.3 does not properly restrict the size or amount of...7.5 High
- imagemagick, canonical ubuntu linux, debian linux +2 moreThere is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and...6.5 Medium
- [unknown] vdsm, redhat virtualization +1 moreIt was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without...6.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30,...5.5 Medium
- gnu binutilsremember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows...7.5 High
- cisco telepresence video communication serverA vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server ...7.5 High
- protobufjs project protobufjs, hackerone protobufjs node module +1 moreDenial of Service in protobufjs5.5 Medium
- joyent sshpk, hackerone sshpk node module +1 moreRegular Expression Denial of Service in sshpk7.5 High
- fastify, hackerone fastify node module +1 moreDenial of Service vulnerability with large JSON payloads in fastify7.5 High
- dtsearchA stack exhaustion vulnerability in the search function of dtSearch 7.90.8538.1 and prior allows...7.5 High
- [unknown] jenkinsCross-Site Request Forgery in Jenkins5.4 Medium
- flifAn issue was discovered in Free Lossless Image Format (FLIF) 0.3. The Plane function in image...5.5 Medium
- google guava, oracle banking payments, communications ip service activator +14 more +16 moreDenial of Service in Google Guava5.9 Medium
- cisco starosA vulnerability in the egress packet processing functionality of the Cisco StarOS operating...7.5 High
- broadcom spring data commons, pivotal software spring data rest, spring by pivotal framework +1 more +3 moreSpring Data Commons contain a property path parser vulnerability caused by unlimited resource allocation7.5 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreUncontrolled resource consumption in nokogiri6.5 Medium
- graphicsmagick, debian linux +1 moreAn issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found...6.5 Medium
- weblogexpert weblog expertWebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service (daemon crash) via a long...7.5 High
- graphicsmagick, debian linux +1 moreAn issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreThe ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly...6.5 Medium
- gdraheim zziplib, canonical ubuntu linux, debian linux +2 moreIn ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the...6.5 Medium
- cisco prime networkA vulnerability in the TCP throttling process of Cisco Prime Network could allow an...8.6 High
- podofo project podofoIn PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve...5.5 Medium
- google androidA vulnerability in the Android media framework (libhevc) related to handling ps_codec_obj memory...7.5 High
- google androidA vulnerability in the Android media framework (libavc) related to handling dec_hdl memory...7.5 High
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function...6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: bbe-smgd process denial of service while processing VLAN authentication requests/rejects6.5 Medium
- qemuVNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to...7.5 High
- podofo project podofoIn PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PdfParser::ReadXRefSubsection...5.5 Medium
- exiv2The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers...5.5 Medium
- dockertar-split memory exhaustion6.5 Medium
- Show moreLoading…