CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- opcfoundation ua .net standard stackMemory Allocation with Excessive Size Value in OPCFoundation.NetStandard.Opc.Ua.Core7.5 High
- couchbase serverAn issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +54 more +56 moreImproper memory allocation during counter check DLM handling can lead to denial of service in...7.5 High
- axiosys bento4An issue was discovered in Bento4 v1.2. There is an allocation size request error in /Ap4RtpAtom...5.5 Medium
- axiosys bento4An issue was discovered in Bento4 1.2. The allocator is out of memory in /Source/C++/Core...5.5 Medium
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_sed denial of service7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreDenial of service in mod_lua r:parsebody7.5 High
- kubernetes cri-o, fedoraproject fedora, redhat enterprise linux +1 more +3 moreNode DOS by way of memory exhaustion through ExecSync request in CRI-O7.5 High
- adbyby project adbybyadbyby v2.7 allows external users to make connections via port 8118. This can cause a program...6.5 Medium
- onlyoffice core, document server +1 moreOnlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to...9.8 Critical
- google androidIn addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due...5.5 Medium
- apport project apport, canonical ubuntu linux +1 moreis_closing_session() allows users to consume RAM in the Apport process5.5 Medium
- apport project apport, canonical ubuntu linux +1 moreis_closing_session() allows users to create arbitrary tcp dbus connections7.1 High
- apport project apport, canonical ubuntu linux +1 moreis_closing_session() allows users to fill up apport.log5.5 Medium
- apache tika, oracle primavera unifier +1 moreApache Tika BPGParser Memory Usage DoS5.5 Medium
- xpdfreader xpdfxpdf 4.04 allocates excessive memory when presented with crafted input. This can be triggered by ...5.5 Medium
- vmware spring framework, netapp cloud secure agent, oncommand insight +1 more +3 moreAllocation of Resources Without Limits or Throttling in Spring Framework6.5 Medium
- vmware spring framework, netapp active iq unified manager, brocade san navigator +3 more +5 moreDenial of service in Spring Framework5.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6,...6.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions before 14.8.6, all versions...4.3 Medium
- tenda ac15 firmwareTenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow. The stack...7.5 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software DNS Enforcement Denial of Service Vulnerability8.6 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software Denial of Service Vulnerability8.6 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software Snort Out of Memory Denial of Service Vulnerability8.6 High
- exfat project exfatrelan exFAT 1.3.0 allows local users to obtain sensitive information (data from deleted files in...4.7 Medium
- angular, angularjs, fedoraproject fedora +1 more +3 moreRegular Expression Denial of Service (ReDoS)5.3 Medium
- google androidIn setStream of WallpaperManager.java, there is a possible way to cause a permanent DoS due to...5.5 Medium
- sonicwall sonicos, nsa 2650 firmware, nsa 2700 firmware +47 more +49 moreA vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP...7.5 High
- zammadA lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to...7.5 High
- f-secure atlant, all f-secure endpoint protection products on windows and mac f-secure linux security (32-bit) f-secure linux security 64 f-secure atlant f-secure internet gatekeeper f-secure cloud protection for salesforce +1 moreDenial-of-Service (DoS) Vulnerability4.3 Medium
- golang go, fedoraproject fedora, netapp kubernetes monitoring operator +2 moreencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 High
- fisglobal gt.mAn issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using...7.5 High
- cisco aironet access point softwareCisco Embedded Wireless Controller with Catalyst Access Points IP Flood Denial of Service Vulnerability8.6 High
- cisco sd-wan vedge routerCisco SD-WAN vEdge Routers Denial of Service Vulnerability5.5 Medium
- mattermost playbooksA specifically drafted Playbook could trigger large amount of webhook requests leading to Denial of Service3.5 Low
- mattermost, mattermost server +1 moreOOM DoS in Mattermost image proxy4.3 Medium
- waycrate swhkdUnsafe parsing in SWHKD5.3 Medium
- gitlab, gitlab pages +1 moreA lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14...5.3 Medium
- vmware spring frameworkAllocation of Resources Without Limits or Throttling in Spring Framework6.5 Medium
- ibm app connect enterprise certified containerIBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified...6.5 Medium
- totolink a720r firmware, ex300 v2 firmware +1 moretotolink EX300_v2, ver V4.0.3c.140_B20210429 and A720R ,ver V4.1.5cu.470_B20200911 have an issue...6.5 Medium
- weka interest security scannerWEKA INTEREST Security Scanner Portscan memory allocation4.3 Medium
- nvidia flare, federated learning application runtime environment +1 moreAllocation of Resources Without Limits or Throttling in nvflare7.5 High
- moodleMoodle denial-of-service risk in the draft files area7.5 High
- nextcloud server, kiteworks security-advisories +1 moreHigh memory usage in Nextcloud server3.5 Low
- apache poi, apache software foundation poi-scratchpad, netapp active iq unified manager +2 moreA carefully crafted TNEF file can cause an out of memory exception5.5 Medium
- twisted, debian linux, fedoraproject fedora +2 more +4 moreBuffer Overflow in Twisted7.5 High
- hashicorp nomadHashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling7.5 High
- metadata-extractor project metadata-extractorAllocation of Resources Without Limits or Throttling in metadata-extractor5.5 Medium
- sha256crypt project sha256crypt, sha512crypt project sha512crypt +1 moresha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU...7.5 High
- Show moreLoading…