CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- ruckuswireless sz-100 firmware, sz-144 firmware, sz-300 firmware +1 more +3 moreDDOS reflection amplification vulnerability in eAut module of Ruckus Wireless SmartZone...7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic7.5 High
- juniper junos os evolvedJunos OS Evolved: PTX10003: An attacker sending specific genuine packets will cause a memory leak in the PFE leading to a Denial of Service6.1 Medium
- google androidIn AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource...5.5 Medium
- google androidIn many functions of AutomaticZenRule.java, there is a possible failure to persist permissions...7.8 High
- google androidIn multiple functions of AutomaticZenRule.java, there is a possible failure to persist...7.8 High
- google androidIn many functions of AutomaticZenRule.java, there is a possible failure to persist permissions...7.8 High
- google androidIn AutomaticZenRule of AutomaticZenRule.java, there is a possible failure to persist permissions...7.8 High
- dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 moreSome Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests...5.9 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreAllocation of Resources Without Limits or Throttling in ikus060/rdiffweb6.3 Medium
- helmHelm vulnerable to Denial of service through string value parsing5.3 Medium
- siemens jt2go, teamcenter visualization v13.2, teamcenter visualization v13.3 +3 more +5 moreA vulnerability has been identified in JT2Go (All versions), Teamcenter Visualization V13.2 (All...3.3 Low
- go standard library net/http, golang go, http2 +2 more +4 moreExcessive memory growth in net/http and golang.org/x/net/http25.3 Medium
- libp2p go-libp2p, protocol libp2p +1 morego-libp2p denial of service vulnerability from lack of resource management7.5 High
- libp2p js-libp2p, protocol libp2p +1 morelibp2p denial of service vulnerability from lack of resource management7.5 High
- discourseAny authenticated Discourse user can create an unlisted topic4.3 Medium
- google androidIn mmu_map_for_fw of gs_ldfw_load.c, there is a possible mitigation bypass due to Permissive...7.8 High
- google androidIn NotificationChannel of NotificationChannel.java, there is a possible failure to persist...7.8 High
- google androidIn NotificationChannel of NotificationChannel.java, there is a possible failure to persist...7.8 High
- google androidIn NotificationChannel of NotificationChannel.java, there is a possible failure to persist...7.8 High
- google androidIn NotificationChannel of NotificationChannel.java, there is a possible failure to persist...7.8 High
- google androidIn NotificationChannel of NotificationChannel.java, there is a possible failure to persist...7.8 High
- google androidIn NotificationChannel of NotificationChannel.java, there is a possible failure to persist...7.8 High
- google androidIn NotificationChannel of NotificationChannel.java, there is a possible failure to persist...7.8 High
- discourseDiscourse chat messages should have a maximum character limit3.5 Low
- mattermostAuthenticated user could send multiple requests containing a parameter which could fetch a large amount of data and can crash a Mattermost server3.1 Low
- mattermostAuthenticated user could send multiple requests containing a large Auto Responder Message payload and can crash a Mattermost server4.3 Medium
- mattermost, mattermost playbooks plugin +1 moreAuthenticated user could send multiple requests containing a large payload to a Playbooks API and can crash a Mattermost server4.3 Medium
- xwiki, xwiki xwiki-platform +1 moreCreation of new database tables through login form on PostgreSQL7.5 High
- ibm openbmc, power system ac922 \(8335-gtg\) firmware, power system ac922 \(8335-gth\) firmware +1 more +3 moreIBM OpenBMC denial of service4.9 Medium
- jetbrains hubIn JetBrains Hub before 2022.3.15181 Throttling was missed when sending emails to a particular...3.5 Low
- phoenix contact fl mguard centerport, fl mguard centerport vpn-1000, fl mguard core tx +59 more +61 moreDenial-of-Service vulnerability in PHOENIX CONTACT mGuard product family7.5 High
- concretecms concrete cmsConcrete CMS vulnerable to Uncontrolled Resource Consumption leading to DoS6.5 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreA vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense (FTD)...5.8 Medium
- wago 750-8100 firmware, 750-8101\/025-000 firmware, 750-8101 firmware +52 more +54 moreWAGO I/O-Check Service prone to Allocation of Resources Without Limits or Throttling7.5 High
- linux kernel, netapp active iq unified manager, h300s firmware +5 more +7 moreThe Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer...7.5 High
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...6.5 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.0.x-9.4.0.x contain allocation of Resources Without Limits or...5.3 Medium
- axiosys bento4Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service.5.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenario5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crash6.5 Medium
- juniper junos os evolvedJunos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OID7.5 High
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreAllocation of Resources Without Limits or Throttling in ikus060/rdiffweb4.5 Medium
- Show moreLoading…