CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- dualspace super securityAn issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of...7.5 High
- hyper h2, hyper +1 moreh2 vulnerable to denial of service7.5 High
- aten pe8108 firmwareAten PE8108 2.4.232 is vulnerable to denial of service (DOS).5.3 Medium
- go standard library mime/multipart, net/textproto, golang go +2 moreExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 High
- m-files serverUncontrolled Resource Consumption in M-Files Server6.5 Medium
- envoyproxy envoyEnvoy may crash when a large request body is processed in Lua filter4.8 Medium
- torchbox wagtailWagtail vulnerable to denial-of-service via memory exhaustion when uploading large files4.9 Medium
- graphql-javaGraphQL Java vulnerable to stack consumption7.5 High
- huawei emui, harmonyos +1 moreSome products have the double fetch vulnerability. Successful exploitation of this vulnerability...7.5 High
- parrot bebop firmwareParrot Bebop 4.7.1. allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the devic…9.1 Critical
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling Denial of Service Vulnerability7.4 High
- qemu, qemu rdma, fedoraproject fedora +2 moreQemu: pvrdma: out-of-bounds read in pvrdma_ring_next_elem_read()6.0 Medium
- crewjam samlcrewjam/saml vulnerable to Denial Of Service Via Deflate Decompression Bomb7.5 High
- debian linux, fedoraproject fedora, xen +2 morex86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple...6.5 Medium
- debian linux, fedoraproject fedora, xen +2 morex86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple...8.6 High
- michaelrsweet pdfioPDFio vulnerable to Denial Of Service when opening a corrupt PDF file6.2 Medium
- fasterxml jackson-databindjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 High
- discourseDiscourse vulnerable to multisite DoS by spamming backups4.5 Medium
- silverstripe graphql, silverstripe-graphql +1 moresilverstripe/graphql Denial of Service vulnerability7.5 High
- opensipsOpenSIPS has vulnerability in the codec_delete_XX() functions7.5 High
- netgear rax30 firmwareAny request send to a Netgear Nighthawk Wifi6 Router (RAX30)'s web service containing a “Content...7.5 High
- rack, debian linux +1 moreRack has possible DoS Vulnerability in Multipart MIME parsing7.5 High
- jenkinsDenial of service in Jenkins Core7.5 High
- jenkinsDenial of service in Jenkins Core7.5 High
- go standard library mime/multipart, golang go +1 moreExcessive resource consumption in mime/multipart7.5 High
- nic knot resolverKnot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification...7.5 High
- hyperHyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method...7.5 High
- apache commons fileupload, apache software foundation tomcat, debian linux +2 moreApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 High
- notaryproject notation-gonotation-go has excessive memory allocation on verification7.5 High
- octoboxOctobox ReDoS vulnerability7.5 High
- mozilla thunderbirdIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly...6.5 Medium
- peazip project peazipAn issue in Giorgio Tani peazip v.9.0.0 allows attackers to cause a denial of service via the End...5.5 Medium
- golang image, tiff, golang.org/x/image golang.org/x/image/tiff +1 more +3 moreDenial of service via crafted TIFF image in golang.org/x/image/tiff5.5 Medium
- containerdcontainerd OCI image importer memory exhaustion6.2 Medium
- phpArray overrun in common path resolve code7.5 High
- starlite-api starliteStarlite DoS vulnerability when parsing multipart request body7.5 High
- kiwitcms kiwi, kiwi tcms +1 moreKiwi TCMS has denial of service vulnerability on Password reset page7.5 High
- kiwitcms kiwi, kiwi tcms +1 moreKiwi TCMS has no protection against brute-force attacks on login page7.5 High
- haxx curl, debian linux, fedoraproject fedora +9 more +11 moreAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...6.5 Medium
- pallets werkzeugWerkzeug may allow high resource usage when parsing multipart form data with many fields7.5 High
- fastify fastify-multipart@fastify/multipart vulnerable to DoS due to unlimited number of parts7.5 High
- qualcomm csr8811 firmware, ipq5010 firmware, ipq5018 firmware +57 more +59 moreUncontrolled resource consumption in WLAN Firmware.7.5 High
- harfbuzz project harfbuzz, fedoraproject fedora +1 morehb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreBIG-IP SSL OCSP Authentication profile vulnerability7.5 High
- djangoproject django, debian linux +1 moreDjango contains Uncontrolled Resource Consumption via cached header7.5 High
- open5gsDue to insufficient length validation in the Open5GS GTP library versions prior to versions 2.4...7.5 High
- discourseDiscourse vulnerable to Allocation of Resources Without Limits via Chat drafts4.3 Medium
- discourseDiscourse subject to Allocation of Resources Without Limits or Throttling6.5 Medium
- cisco webex room phone, sip ip phone software, webex room phone firmware +1 more +3 moreA vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco Webex Room Phone and...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreCalls to console.log allowed bypassing Content Security Policy via format directive6.5 Medium
- Show moreLoading…