CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- apache avroDenial of service while reading data in Avro Rust SDK7.5 High
- uniwill sparkio.sysThe Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL...7.8 High
- nextcloud server, kiteworks security-advisories +1 moreMissing brute force protection on cloud federation sharing in Nextcloud Server6.5 Medium
- triplecross project triplecrossTripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no...7.5 High
- triplecross project triplecrossA segmentation fault in TripleCross v0.1.0 occurs when sending a control command from the client...7.5 High
- teamplus technology inc. pro, teamplus team\+ pro +1 moreTEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling-25.4 Medium
- teamplus technology inc. pro, teamplus team\+ pro +1 moreTEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling-17.7 High
- nhi card’s web service component, health insurance web service component +1 moreNHI card’s web service component - Stack-based Buffer Overflow-25.5 Medium
- nhi card’s web service component, health insurance web service component +1 moreNHI card’s web service component - Heap-based Buffer Overflow5.5 Medium
- openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 more +4 moreUnbounded gas consumption in @openzeppelin/contracts5.3 Medium
- discourseEmail activation route can be abused by spammers in Discourse6.5 Medium
- rust-websocket project rust-websocket, fedoraproject fedora +1 moreMemory allocation based on untrusted length in rust-websocket7.5 High
- juniper junos os evolvedJunos OS Evolved: A high rate of specific hostbound traffic will cause unexpected hostbound traffic delays or drops7.5 High
- teamplus team\+ pro, teamplus technology inc. pro (private cloud) +1 moreTEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling7.7 High
- libtirpc project libtirpc, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process...7.5 High
- pexip infinityPexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption...7.5 High
- mattermostMalicious imports can lead to Denial of Service4.3 Medium
- protocol libp2p, libp2p rust-libp2p +1 morelibp2p-rust denial of service vulnerability from lack of resource management7.5 High
- kubeedgeKubeEdge Websocket Client in package Viaduct: DoS from large response message4.4 Medium
- kubeedgeKubeEdge Cloud Stream and Edge Stream DoS from large stream message4.4 Medium
- kubeedgeKubeEdge CloudCore Router memory exhaustion4.4 Medium
- kubeedgeKubeEdge DoS when signing the CSR from EdgeCore4.9 Medium
- glftpdAn issue was discovered in glFTPd 2.11a that allows remote attackers to cause a denial of service...7.5 High
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreImproper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote...6.5 Medium
- tenda m3 firmwareTenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg.7.5 High
- tenda m3 firmwareTenda M3 V1.0.0.12 was discovered to contain a stack overflow via the listN parameter in the...7.5 High
- tenda m3 firmwareTenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm.7.5 High
- tenda m3 firmwareTenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function...7.5 High
- tenda m3 firmwareTenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function...7.5 High
- totolink t6 firmwareTOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the password...7.5 High
- totolink t6 firmwareTOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc...7.5 High
- totolink t6 firmwareTOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc...7.5 High
- totolink t6 firmwareTOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc...7.5 High
- totolink t6 firmwareTOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the command...7.5 High
- totolink t6 firmwareTOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the url...7.5 High
- totolink t6 firmwareTOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc, week...7.5 High
- totolink t6 firmwareTOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac...7.5 High
- totolink t6 firmwareTOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc...7.5 High
- totolink t6 firmwareTOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac...7.5 High
- mediawikiAn issue was discovered in MediaWiki through 1.38.1. The lemma length of a Wikibase lexeme is...7.5 High
- gpacThe schm_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service via a...5.5 Medium
- gpacThe GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a...5.5 Medium
- axiosys bento4In Bento4 1.6.0-638, there is an allocator is out of memory in the function AP4_Array...7.5 High
- haxx curl, debian linux, fedoraproject fedora +20 more +22 morecurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 Medium
- haxx curl, apple macos, debian linux +20 more +22 moreA malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to...4.3 Medium
- argoproj argo cd, argo-cd +1 moreArgo CD vulnerable to Uncontrolled Memory Consumption6.5 Medium
- vmware spring cloud functionDenial of Service in Spring Cloud Function7.5 High
- autodesk autocad, design review, navisworks +11 more +13 moreAutodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior...7.8 High
- suse manager server, manager server 4.1, manager server 4.2 +2 moreSUMA unauthenticated remote DoS via resource exhaustion7.5 High
- inventree inventree/inventree, inventree project inventree +1 moreAllocation of Resources Without Limits or Throttling in inventree/inventree7.1 High
- Show moreLoading…