CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreAllocation of Resources Without Limits or Throttling in ikus060/rdiffweb5.6 Medium
- xapiXAPI open file limit DoS It is possible for an unauthenticated client on the network to cause...5.3 Medium
- ibm cics tx, cics tx advanced, cics tx standard +2 moreIBM CICS TX 11.1 could allow a local user to cause a denial of service due to improper load...6.2 Medium
- nocodb, nocodb nocodb/nocodb +1 moreAllocation of Resources Without Limits or Throttling in nocodb/nocodb7.3 High
- go standard library archive/tar, golang go +1 moreUnbounded memory consumption when reading headers in archive/tar7.5 High
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreAllocation of Resources Without Limits or Throttling in ikus060/rdiffweb3.6 Low
- isc dhcp, debian linux, fedoraproject fedora +2 moreDHCP memory leak6.5 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreNo limit in length of "Token name" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb7.5 High
- axiosys bento4An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the...5.5 Medium
- axiosys bento4An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the...5.5 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreNo limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb5.3 Medium
- discourseDiscourse user profile location and website fields were not sufficiently length-limited4.3 Medium
- uclibc, uclibc-ng, anker eufy homebase 2 +1 more +3 moreA memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0...8.1 High
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreAllocation of Resources Without Limits or Throttling in ikus060/rdiffweb5.3 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreAllocation of Resources Without Limits or Throttling in ikus060/rdiffweb5.3 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a heap-buffer-overflow via getTransparentColor...5.5 Medium
- apache kafkaUnauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers7.5 High
- samsung mtowerA Memory Allocation with Excessive Size Value vulnerablity in the TEE_Realloc function in Samsung...7.5 High
- typo3Denial of Service via Page Error Handling in TYPO3/cms5.9 Medium
- mattermost, mattermost server +1 moreServer-side Denial of Service while processing a specifically crafted JPEG file3.1 Low
- eclipse miloDenial of Service (DoS)5.9 Medium
- fluxcd flux2, helm-controller, helm +2 moreFlux2 Helm Controller denial of service7.7 High
- librawIn LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function ...5.5 Medium
- cimgA flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with...5.5 Medium
- axum-core project axum-coreDoS in axum-core due to missing request size limit7.5 High
- wolfsslAn issue was discovered in wolfSSL before 5.5.0 (when --enable-session-ticket is used); however,...5.9 Medium
- dlink dir-816 firmwareD-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/addRouting.7.5 High
- helmDenial of service in Helm6.5 Medium
- linux kernel, redhat enterprise linux +1 moreA flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can...5.5 Medium
- redhat xnio, integration camel k, integration camel quarkus +1 more +3 moreXNIO `notifyReadClosed` method logging message to unexpected end7.5 High
- asneg opc ua stackDenial of Service (DoS)7.5 High
- opcua project opcuaDenial of Service (DoS)7.5 High
- open62541, fedoraproject fedora +1 moreDenial of Service (DoS)7.5 High
- freeopcuaDenial of Service (DoS)7.5 High
- node-opcua project node-opcuaDenial of Service (DoS)7.5 High
- asyncua project asyncua, opcua project opcua +1 moreDenial of Service (DoS)7.5 High
- monostream tifigtifig v0.2.2 was discovered to contain a heap-buffer overflow via __asan_memmove at /asan...5.5 Medium
- swfmillSWFMill commit 53d7690 was discovered to contain a memory allocation issue via operator new[]...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a stack overflow via __sanitizer:...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via draw_stroke at ...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a stack overflow via vfprintf at /stdio-common...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via /bin/png2swf+0x552cea.5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::reset()...5.5 Medium
- pngdec project pngdecPNGDec commit 8abf6be was discovered to contain a memory allocation problem via asan_malloc_linux...6.5 Medium
- monostream tifigtifig v0.2.2 was discovered to contain a resource allocation issue via operator new(unsigned long...5.5 Medium
- moodleIn Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it...7.5 High
- samsung mtowerTEE_Malloc in Samsung mTower through 0.3.0 allows a trusted application to achieve Excessive...7.5 High
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +233 more +235 moreA vulnerability has been identified in SCALANCE M-800 / S615 (All versions), SCALANCE W-1700 IEEE...7.5 High
- apache avroMemory overconsumption in Avro Rust SDK7.5 High
- Show moreLoading…