CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- wowza streaming engineWowza Streaming Engine through 4.8.11+5 could allow an authenticated, remote attacker to exhaust...6.5 Medium
- redis, debian linux, fedoraproject fedora +3 more +5 moreDoS vulnerability in Redis7.5 High
- elementsproject c-lightningBlockstream c-lightning through 0.10.1 allows loss of funds because of dust HTLC exposure.9.4 Critical
- lightning network daemon project network daemonLightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.8.6 High
- acinq eclairACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure.9.4 Critical
- mediawiki, fedoraproject fedora +1 moreMediaWiki allows a denial of service5.3 Medium
- mediawiki, fedoraproject fedora +1 moreMediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query...7.5 High
- zoom meeting connector, zoom video communications inc on-premise meeting connector controller +1 moreThe Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4...7.5 High
- google androidIn memory management driver, there is a possible system crash due to a missing bounds check. This...5.5 Medium
- google androidIn memory management driver, there is a possible system crash due to a missing bounds check. This...5.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very...5.1 Medium
- f5 big-ip advanced web application firewall, big-ip application security manager +1 moreOn version 15.1.x before 15.1.3, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6, when the...5.3 Medium
- jtekt 2port-efr thu-6404 firmware, ef10 tcu-6982 firmware, fl\/et-t-v2h thu-6289 firmware +24 more +26 moreAll versions of the afffected TOYOPUC-PC10 Series,TOYOPUC-Plus Series,TOYOPUC-PC3J/PC2J Series,...4.3 Medium
- nextcloud richdocuments, kiteworks security-advisories +1 moreLack of ratelimit on Richdocuments OCS endpoint in nextcloud5.3 Medium
- th-wildau covid-19 contact tracingapi/account/register in the TH Wildau COVID-19 Contact Tracing application through 2021-09-01 has...6.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreA memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg...5.5 Medium
- vmware workspace one uem consoleVMware Workspace ONE UEM REST API contains a denial of service vulnerability. A malicious actor...7.5 High
- xen, debian linux, fedoraproject fedora +2 morexen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to...4.9 Medium
- cisco unified computing system (managed), unified computing system +1 moreCisco UCS Manager Software SSH Sessions Denial of Service Vulnerability4.3 Medium
- axiosys bento4The AP4_CttsAtom class in Core/Ap4CttsAtom.cpp in Bento4 1.5.1.0 allows remote attackers to cause...7.5 High
- gitlabA vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6. GitLab Webhook...7.7 High
- exiv2An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0...6.5 Medium
- google androidIn memory management driver, there is a possible system crash due to a missing bounds check. This...5.5 Medium
- gpac, debian linux +1 moreAn exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality...8.8 High
- gpac, debian linux +1 moreAn exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality...8.8 High
- mitel micollabThe AWV and MiCollab Client Service components in Mitel MiCollab before 9.3 could allow an...3.7 Low
- contiki-os contikiIn Contiki 3.0, a Telnet server that silently quits (before disconnection with clients) leads to...7.5 High
- helpsystems cobalt strikeA Denial-of-Service (DoS) vulnerability was discovered in Team Server in HelpSystems Cobalt...7.5 High
- linux kernel, netapp element software, hci bootstrap os +2 more +4 morebtrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock)...5.5 Medium
- citrix gateway, netscaler gateway, sd-wan wanop +1 more +3 moreA vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix...7.5 High
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP vulnerable to email spam via lack of flagging rate4.3 Medium
- nervos ckbAllocation of Resources Without Limits or Throttling in ckb7.5 High
- flowpaper pdf2jsonAn issue has been found in function XRef::fetch in PDF2JSON 0.70 that allows attackers to cause a...5.5 Medium
- flowpaper pdf2jsonAn issue has been found in function vfprintf in PDF2JSON 0.70 that allows attackers to cause a...5.5 Medium
- systemd project systemd, debian linux, fedoraproject fedora +5 more +7 morebasic/unit-name.c in systemd 220 through 248 has a Memory Allocation with an Excessive Size Value...5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and EX4600 Series: Continuous traffic destined to a device configured with MC-LAG leading to nodes losing their control connection which can impact traffic7.5 High
- ibm secure external authentication server, secure proxy, sterling secure proxy +2 moreIBM Secure External Authentication Server 2.4.3.2, 6.0.1, 6.0.2 and IBM Secure Proxy 3.4.3.2, 6.0...7.5 High
- siemens rwg1.m12, rwg1.m12d, rwg1.m8 +3 more +5 moreA vulnerability has been identified in RWG1.M12 (All versions < V1.16.16), RWG1.M12D (All...4.3 Medium
- seimens scalance m812-1 adsl-router annex a, scalance m812-1 adsl-router annex b, siemens development/evaluation kits for profinet io: dk standard ethernet controller +395 more +397 moreA vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard...8.7 High
- apache commons compress, netapp active iq unified manager, oncommand insight +24 more +26 moreApache Commons Compress 1.1 to 1.20 denial of service vulnerability7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +21 more +23 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerability7.5 High
- linuxfoundation grpc swiftUncontrolled Resource Consumption in LengthPrefixedMessageReader7.5 High
- redhat keycloak, single sign-on +1 moreAllocation of resources without limits or throttling in keycloak-model-infinispan7.5 High
- phoenix contact ilc1x, phoenixcontact ilc1x0 firmware, ilc1x1 firmware +2 morePhoenix Contact: ILC1x Industrial controllers affected by Denial-of-Service vulnerability7.5 High
- pterodactyl wingsAsymmetric Resource Consumption (Amplification) in Docker containers created by Wings6.5 Medium
- huawei ecns280 td firmwareThere is a resource management error vulnerability in eCNS280_TD V100R005C10SPC650. An attacker...7.5 High
- vfsjfilechooser2 project vfsjfilechooser2ReDOS in Vfsjfilechooser27.5 High
- is-svg project is-svgReDOS in IS-SVG7.5 High
- color-string project color-stringRegular Expression Denial of Service (ReDOS)5.3 Medium
- dovecot, fedoraproject fedora +1 moreThe Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as...4.3 Medium
- Show moreLoading…