CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- mpmath, fedoraproject fedora +1 moreReDOS in Mpmath7.5 High
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +9 more +11 moreA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny file5.5 Medium
- octavolabs vernemqVerneMQ MQTT Broker versions prior to 1.12.0 are vulnerable to a denial of service attack as a...7.5 High
- emq technologies x broker, emqx emq x broker +1 moreEMQ X Broker versions prior to 4.2.8 are vulnerable to a denial of service attack as a result of...7.5 High
- mintty project minttyMintty before 3.4.5 allows remote servers to cause a denial of service (Windows GUI hang) by...7.5 High
- redhat openshift container platformA flaw was found in the Restricted Security Context Constraints (SCC), where it allows pods to...6.5 Medium
- huawei usg9500, usg9500 firmware +1 moreThere is a resource management error vulnerability in the verisions V500R001C60SPC500,...4.9 Medium
- qemu, debian linux, redhat enterprise linux +2 moreA flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined...5.5 Medium
- wago 750-8202 firmware, 750-8203 firmware, 750-8204 firmware +26 more +28 moreWAGO: PFC200 Denial of Service due to the number of connections to the runtime5.3 Medium
- evm project evmMemory over-allocation in evm crate6.5 Medium
- siemens simatic hmi comfort outdoor panels v15 7\" & 15\" (incl. siplus variants), simatic hmi comfort outdoor panels v16 7\" & 15\" (incl. siplus variants), simatic hmi comfort panels v15 4\" - 22\" (incl. siplus variants) +31 more +33 moreA vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl....7.5 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2. When...5.3 Medium
- etherpadEtherpad < 1.8.3 is affected by a missing lock check which could cause a denial of service....7.5 High
- the wireshark foundation wireshark, debian linux, fedoraproject fedora +1 more +3 moreExcessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12...5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configured6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ANCPD core when hitting maximum-discovery-table-entries limit6.5 Medium
- matrix-media-repo project matrix-media-repoDenial of service through memory exhaustion5.7 Medium
- matrix sydentDenial of service attack via memory exhaustion7.5 High
- github.com/revel/revel, revel +1 moreResource exhaustion in github.com/revel/revel7.5 High
- kopano groupware core, zarafa +1 morekopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10...7.5 High
- academysoftwarefoundation openexr, debian linux +1 moreThere's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker...5.5 Medium
- academysoftwarefoundation openexr, debian linux +1 moreThere's a flaw in OpenEXR's scanline input file functionality in versions before 3.0.0-beta. An...5.5 Medium
- libass project libassStack overflow in the parse_tag function in libass/ass_parse.c in libass before 0.14.0 allows...8.8 High
- parse duration project durationUncontrolled Resource Consumption in parse_duration7.5 High
- pupnp project pupnpA stack overflow in pupnp 1.16.1 can cause the denial of service through the Parser_parseDocument...7.5 High
- debian linux, linux kernel, netapp cloud backup +1 more +3 moreAn issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part...6.5 Medium
- element-hq synapse, fedoraproject fedora +1 moreDenial of service attack via .well-known lookups4.3 Medium
- fasterxml jackson-dataformats-binary, oracle weblogic server, quarkus +2 moreDenial of Service (DoS)7.5 High
- the wireshark foundation wireshark, fedoraproject fedora, oracle zfs storage appliance +2 moreCrash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet...3.7 Low
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net,...5.5 Medium
- nfstreamNFStream Local Denial of Service (DoS)5.5 Medium
- siemens scalance w780 and w740 (ieee 802.11n) family, scalance w740 firmware, scalance w780 firmware +2 moreA vulnerability has been identified in SCALANCE W780 and W740 (IEEE 802.11n) family (All versions...4.3 Medium
- abb ac500 v2 products with onboard ethernet, ac500 cpu firmware +1 moreAC500 V2 unauthenticated crafter packet vulnerability8.6 High
- http4sUnbounded connection acceptance in http4s-blaze-server7.5 High
- http4s blazeUnbounded connection acceptance leads to file handle exhaustion7.5 High
- google androidIn SystemSettingsValidators, there is a possible permanent denial of service due to missing...5.5 Medium
- moodleMoodle Client side denial of service via personal message5.3 Medium
- cisco umbrella, umbrella insights virtual appliance +1 moreCisco Umbrella Dashboard Packet Flood Vulnerability5.3 Medium
- opendesign drawings software development kit, siemens comos, jt2go +1 more +3 moreAn issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation...7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets7.4 High
- jenkinsExcessive memory allocation in graph URLs leads to denial of service in Jenkins6.5 Medium
- nvidia virtual gpu managerNVIDIA Virtual GPU Manager NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in...7.8 High
- socket socket.io-parserResource exhaustion in socket.io-parser7.5 High
- huawei cloudengine 12800, cloudengine 5800, cloudengine 6800 +5 more +7 moreThere is a memory leak vulnerability in some versions of Huawei CloudEngine product. An...7.5 High
- rockwellautomation factorytalk linxAn attacker-controlled memory allocation size can be passed to the C++ new operator in the...5.5 Medium
- rockwellautomation factorytalk linxAn attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr...7.5 High
- pureftpd pure-ftpdPure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough...7.5 High
- arm compilerArm Compiler 5 through 5.06u6 has an error in a stack protection feature designed to help spot...7.8 High
- xen xapiAn issue was discovered in Xen XAPI before 2020-12-15. Certain xenstore keys provide feedback...7.5 High
- Show moreLoading…