CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- pexip infinityPexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote...7.5 High
- vmware esxi, cloud foundation +1 moreESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor...7.5 High
- fedoraproject extra packages for enterprise linux, fedora, prometheus client golang +1 more +3 moreUncontrolled Resource Consumption in promhttp7.5 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreDenial of Service and Data Integrity vulnerability in features command5.4 Medium
- apache artemis, apache software foundation activemq artemis, netapp active iq unified manager +1 more +3 moreApache ActiveMQ Artemis DoS7.5 High
- google tensorflowMemory exhaustion in Tensorflow4.3 Medium
- insyde insydeh2o, siemens simatic field pg m5, simatic field pg m6 +15 more +17 moreA vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that...8.2 High
- itextpdf itextAllocation of Resources Without Limits or Throttling in iText6.5 Medium
- stormshield network securityAn issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used). An attacker can...5.3 Medium
- jerryscriptJerryscript v3.0.0 and below was discovered to contain a stack overflow via...7.8 High
- bingrep project bingrepDenial of service in bingrep7.5 High
- contribsys sidekiq, debian linux +1 moreDenial of service in sidekiq7.5 High
- oracle graalvm, debian linux, netapp 7-mode transition tool +17 more +19 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...5.3 Medium
- android-gif-drawable project android-gif-drawableandroid-gif-drawable vulerable to denial of service due to unrestricted comment length7.5 High
- juniper junos, juniper networks junos os +1 moreSRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops7.5 High
- webassembly binaryenA Stack Overflow vulnerability exists in Binaryen 103 via the printf_common function.5.5 Medium
- schlage be468, silicon labs 500 series, silabs 500 series firmware +2 moreZ-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible...6.5 Medium
- apache avroPossible DOS vulnerabilities in C# Avro SDK7.5 High
- libmingIn libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in util/parser.c lacks a boundary check...6.5 Medium
- libmingIn libming 0.4.8, a memory exhaustion vulnerability exist in the function cws2fws in util/main.c....6.5 Medium
- huawei emui, harmony os, harmonyos +1 more +3 moreThere is a Memory leakage vulnerability in Smartphone.Successful exploitation of this...7.5 High
- debian linux, linux kernel +1 moreGuest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information...6.5 Medium
- debian linux, linux kernel +1 moreGuest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information...6.5 Medium
- atomixA vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.6.5 Medium
- cbioportal project cbioportalA regular expression denial of service (ReDoS) vulnerability exits in cbioportal 3.6.21 and older...7.5 High
- calibre-ebook calibre, fedoraproject fedora +1 morecalibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular...7.5 High
- actions-semi ats2815 firmware, ats2819 firmware, ats2819p firmware +2 more +4 moreThe Bluetooth Classic implementation on Actions ATS2815 chipsets does not properly handle the...6.5 Medium
- debian linux, fedoraproject fedora, xen +2 moreguests may exceed their designated memory limit When a guest is permitted to have close to 16TiB...8.6 High
- moddableOpenSource Moddable v10.5.0 was discovered to contain a stack overflow in the...7.8 High
- moddableOpenSource Moddable v10.5.0 was discovered to contain a stack overflow via the component ...7.8 High
- cloudflare octorpki, debian linux +1 moreOctoRPKI crashes when processing GZIP bomb returned via malicious repository4.2 Medium
- gitlabA potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The...5.3 Medium
- gitlabA potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a...5.3 Medium
- gitlabA regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3...3.1 Low
- cisco asyncos, email security appliance (esa) +1 moreCisco Email Security Appliance Denial of Service Vulnerability7.5 High
- fortinet fortiportalA memory allocation with excessive size value vulnerability in the license verification function...4.3 Medium
- nvidia virtual gpu, virtual gpu software +1 moreNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager kernel driver, where a...5.5 Medium
- huawei harmonyosA component of the HarmonyOS has a Allocation of Resources Without Limits or Throttling...5.5 Medium
- huawei emui, magic ui +1 moreThere is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- snort, cisco firepower threat defense software, secure firewall management center +2 more +4 moreMultiple Cisco Products Snort Memory Leak Denial of Service Vulnerability6.8 Medium
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- auvesy versiondogAUVESY Versiondog8.0 High
- auvesy versiondogAUVESY Versiondog7.3 High
- modern-async project modern-asyncUnlimited requests in modern-async7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Traffic drops will be observed if MS-MPC/MS-PIC resources are consumed by certain traffic causing a partial DoS5.3 Medium
- siemens ruggedcom rox mx5000, ruggedcom rox rx1400, ruggedcom rox rx1500 +17 more +19 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM...7.5 High
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreA flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with...5.5 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreCisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities8.8 High
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreCisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities8.8 High
- golang go, netapp cloud insights telegraf +1 moreIn archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely...7.5 High
- Show moreLoading…