CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service7.5 High
- apache tikaAllocation of Resources Without Limits or Throttling in Apache Tika8.8 High
- apache tikaAllocation of Resources Without Limits or Throttling in Apache Tika7.8 High
- apache tikaAllocation of Resources Without Limits or Throttling in Apache Tika6.5 Medium
- redhat 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux server eus +2 moreIt was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17,...7.5 High
- mikrotik routerosMikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to memory exhaustion. By...6.5 Medium
- mitsubishi electric fr configurator2, mitsubishielectric electric fr configurator2 +1 moreMitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be...5.5 Medium
- libjpeg-turbo** DISPUTED ** In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of...5.5 Medium
- lodashRegular Expression Denial of Service (ReDoS) in lodash6.5 Medium
- mikrotik routerosA vulnerability in the FTP daemon on MikroTik routers through 6.44.3 could allow remote attackers...7.5 High
- exiv2, canonical ubuntu linux, debian linux +1 more +3 moreA PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an...6.5 Medium
- livezillaLiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service (memory consumption) in...5.9 Medium
- powerdns authoritative, debian pdns, opensuse backports +1 more +3 moreA Vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.9, 4.0.8...3.5 Low
- freebsdIn FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non...7.5 High
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +18 more +20 moreJonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This...5.3 Medium
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +21 more +23 moreSACK can cause extensive memory use via fragmented resend queue5.3 Medium
- apache hbase, rust-protobuf project rust-protobuf +1 moreUncontrolled memory consumption in protobuf7.5 High
- schneider-electric somachine basic, modicon m221 firmware +1 moreAn Environment (CWE-2) vulnerability exists in SoMachine Basic, all versions, and Modicon M221...7.5 High
- cisco small business 300 series managed switches, sf300-08 firmware, sf300-24 firmware +25 more +27 moreCisco Small Business 300 Series Managed Switches DHCP Denial of Service Vulnerability6.8 Medium
- cisco 550x series stackable managed switches, esw2-350g52dc firmware, esw2-550x48dc firmware +103 more +105 moreCisco Small Business Series Switches Simple Network Management Protocol Denial of Service Vulnerability7.7 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software Packet Processing Denial of Service Vulnerability8.6 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software TCP Ingress Handler Denial of Service Vulnerability8.6 High
- dell emc open manage system administrator, dell emc openmanage server administrator +1 moreImproper Range Header Processing Vulnerability4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreA flaw was found in the Linux kernel's vfio interface implementation that permits violation of...4.7 Medium
- isc bind, bind 9, f5 big-ip access policy manager +15 more +17 moreLimiting simultaneous TCP clients was ineffective7.5 High
- abb 1sap120600r0071 pm554-tp-eth, pm554-tp-eth firmware, abb, phoenix contact, schneider electric, siemens, and wago 2700974 ilc 151 eth +19 more +21 moreABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers,...7.5 High
- juniper junos, juniper networks junos os +1 moreSRX Series: Crafted packets destined to fxp0 management interface on SRX340/SRX345 devices can lead to DoS6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd daemon memory consumption Denial of Service when receiving specific IPv6 DHCP packets.7.4 High
- podofo project podofoAn issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp...5.5 Medium
- kubernetes, redhat openshift container platform +1 moreKubernetes DoS Vulnerability6.5 Medium
- cisco ios, ios xe, ios and ios-xe software +2 moreCisco IOS and IOS XE Software IP Service Level Agreement Denial of Service Vulnerability8.6 High
- eclipse jetty, the eclipse foundation eclipse jetty, fedoraproject fedora +2 moreUncontrolled Resource Consumption in org.eclipse.jetty:jetty-server7.5 High
- node.js, opensuse leap +1 moreKeep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js...7.5 High
- node.js, opensuse leap +1 moreIn Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before...7.5 High
- rubyonrails rails, debian linux, fedoraproject fedora +4 more +6 moreDenial of Service Vulnerability in Action View7.5 High
- cron project cron, debian linux, fedoraproject fedora +2 moreVixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service ...5.5 Medium
- cisco nexus 1000v switch for microsoft hyper-v, nexus 1000v switch for vmware vsphere, nexus 3000 series switches +9 more +11 moreCisco NX-OS Software Netstack Denial of Service Vulnerability8.6 High
- flexera flexnet publisher, oracle communications lsms +1 moreA Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher...9.8 Critical
- gnu binutils, netapp element software management +1 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...5.5 Medium
- gnu binutils, canonical ubuntu linux, netapp hci management node +1 more +3 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...5.5 Medium
- gnu binutils, netapp hci management node, solidfire +2 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...5.5 Medium
- torproject torIn Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2...7.5 High
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 moreUncontrolled Memory Consumption in Django7.5 High
- webassembly binaryenwasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an...6.5 Medium
- axiosys bento4An issue was discovered in AP4_Array<AP4_CttsTableEntry>::EnsureCapacity in Core/Ap4Array.h in...6.5 Medium
- libmingThe readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have...8.8 High
- libmingThe parseSWF_ACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote...8.8 High
- elfutils project elfutilsAn attempted excessive memory allocation was discovered in the function read_long_names in...6.5 Medium
- uclouvain openjpegAn issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of...6.5 Medium
- axiosys bento4An issue was discovered in Bento4 1.5.1-628. The AP4_ElstAtom class in Core/Ap4ElstAtom.cpp has...6.5 Medium
- Show moreLoading…