CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- debian linux, xen +1 moreAn issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are...6.5 Medium
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of...6.2 Medium
- google androidIn TextView of TextView.java, there is a possible app hang due to improper input validation. This...6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping...6.2 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Nodes in xenstore have an ownership. In oxenstored...6.0 Medium
- tcpdump, apple mac os x, macos +2 more +4 moreppp decapsulator can be convinced to allocate a large amount of memory7.5 High
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA flaw was found in the spice-vdagentd daemon, where it did not properly handle client...5.5 Medium
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system...5.5 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreIn Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan...7.5 High
- shibboleth identity providerShibboleth Identify Provider 3.x before 3.4.6 has a denial of service flaw. A remote...7.5 High
- mozilla nss, fedoraproject fedora, mozilla network security services +4 more +6 moreA flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw...7.5 High
- vm-superio project vm-superioIn vm-superio before 0.1.1, the serial console FIFO can grow to unlimited memory usage when data...7.5 High
- gitlabAn issue has been discovered in GitLab affecting versions prior to 13.2.10, 13.3.7 and 13.4.2:...2.7 Low
- nvidia gpu display driver, virtual gpu manager +1 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode...4.4 Medium
- google tensorflowDenial of service in tensorflow-lite4.0 Medium
- ws-rs project ws-rsInsufficient size checks in ws7.5 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities8.6 High
- google androidIn libmp4extractor, there is a possible resource exhaustion due to a missing bounds check. This...6.5 Medium
- keycloak, redhat openshift application runtimes, single sign-on +2 moreAllocation of Resources Without Limits or Throttling in Keycloak7.5 High
- gitlabA vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab...3.7 Low
- node-fetchFile size limit bypass in node-fetch2.6 Low
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software DVMRP Memory Exhaustion Vulnerability8.6 High
- codesys control for beaglebone, control for empc-a\/imx6, control for iot2000 +13 more +15 moreCODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.7.5 High
- lodash, oracle banking corporate lending process management, banking credit facilities process management +15 more +17 morePrototype Pollution in lodash7.4 High
- schokokeks freewvsUncontrolled Resource Consumption in freewvs2.8 Low
- whoopsie project whoopsieThe parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation...5.5 Medium
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security update7.5 High
- apache traffic server, debian linux +1 moreApache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to...7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It mishandles IP...5.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows...7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial...7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit...6.5 Medium
- hashicorp consulAllocation of Resources Without Limits or Throttling in Hashicorp Consul7.5 High
- google androidIn setSyncSampleParams of SampleTable.cpp, there is possible resource exhaustion due to a missing...8.8 High
- red hat undertow, netapp oncommand insight, redhat jboss enterprise application platform +1 more +3 moreAllocation of Resources Without Limits or Throttling in Undertow7.5 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption...7.5 High
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because...7.5 High
- libexif project libexif, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF...7.5 High
- dkd direct mailDenial of service in direct_mail5.3 Medium
- qemuA potential DoS flaw was found in the virtio-fs shared file system daemon (virtiofsd)...3.3 Low
- ushareit shareitSHAREit through 4.0.6.177 does not check the full message length from the received packet header ...7.5 High
- ushareit shareitSHAREit through 4.0.6.177 does not check the body length from the received packet header (which...7.5 High
- netty, debian linux, fedoraproject fedora +10 more +12 moreDenial of Service in Netty7.5 High
- kubernetes, fedoraproject fedora +1 moreKubernetes API server denial of service5.3 Medium
- kubernetes, fedoraproject fedora +1 moreKubernetes kubelet denial of service4.3 Medium
- mikrotik routerosThe SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to generate CPU...7.5 High
- signotec signopad-api\/webAn issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1...6.5 Medium
- facebook thriftGolang Facebook Thrift servers vulnerable to denial of service7.5 High
- facebook thriftC++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes...7.5 High
- facebook thriftJava Facebook Thrift servers would not error upon receiving messages declaring containers of...7.5 High
- Show moreLoading…