CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- hewlett packard enterprise (hpe) hp-uxHP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface...5.5 Medium
- xerial snappy-javasnappy-java's unchecked chunk length leads to DoS7.5 High
- apache strutsApache Struts: DoS via OOM owing to no sanity limit on normal form fields in multipart forms4.3 Medium
- apache strutsApache Struts: DoS via OOM owing to not properly checking of list bounds4.3 Medium
- fasterxml jackson-databindAn issue was discovered jackson-databind thru 2.15.2 allows attackers to cause a denial of...4.7 Medium
- appcrossx crossxAn issue found in CrossX v.1.15.3 for Android allows a local attacker to cause a persistent...5.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn dialer service, there is a possible missing permission check. This could lead to local denial...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn dialer service, there is a possible missing permission check. This could lead to local denial...5.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab4.3 Medium
- pmmp pocketmine-mpPocketMine-MP before 4.18.0-ALPHA2 Bandwidth Amplification via InventoryTransactionPacket5.3 Medium
- google androidIn list_key_entries of utils.rs, there is a possible way to disable user credentials due to...4.4 Medium
- google androidIn doInBackground of NotificationContentInflater.java, there is a possible temporary denial or...7.5 High
- metersphereMeterSphere denial of service vulnerability6.5 Medium
- emqx nanomqA memory leak vulnerability exists in NanoMQ 0.17.2. The vulnerability is located in the file...5.5 Medium
- wavekeyboard wave animated keyboard emojiAn issue found in Wave Animated Keyboard Emoji v.1.70.7 for Android allows a local attacker to...5.5 Medium
- openssl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morePossible DoS translating ASN.1 object identifiers6.5 Medium
- mp4v2 project mp4v2mp4v2 v2.1.2 was discovered to contain a memory leak via the class MP4BytesProperty.6.5 Medium
- jerryscriptJerryscript 3.0 (commit 05dbbd1) was discovered to contain out-of-memory issue in malloc.5.5 Medium
- froxlor, froxlor froxlor/froxlor +1 moreAllocation of Resources Without Limits or Throttling in froxlor/froxlor6.8 Medium
github.com/ipfs/kuboGogithub.com/ipfs/kubo affected by DOS Bitswap unbounded persistent memory leak5.3 Medium- rocket.chatA vulnerability has been identified where a maliciously crafted message containing a specific...7.5 High
- ipfs boxoBoxo bitswap/server: DOS unbounded persistent memory leak8.2 High
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen 3945wx firmware, ryzen 3955wx firmware +6 more +8 moreA malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which...9.8 Critical
- redhat openshift api for data protection, openshift container platform, openshift developer tools and services +2 moredistribution catalog API endpoint can lead to OOM via malicious user input6.5 Medium
- gl-inet gl-a1300 firmware, gl-ap1300 firmware, gl-ap1300lte firmware +29 more +31 moreAn issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in...7.5 High
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3,...9.1 Critical
- ibm mq, mq appliance +1 moreIBM MQ denial of service5.9 Medium
- linuxfoundation rekorRekor's compressed archives can result in OOM conditions7.5 High
- google androidIn several functions of SnoozeHelper.java, there is a possible way to grant notifications access...7.8 High
- google androidIn pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a...5.5 Medium
- ibm safer paymentsIBM Safer Payments denial of service6.5 Medium
- ebankitAn issue was discovered in ebankIT before 7. A Denial-of-Service attack is possible through the...7.5 High
- owasp modsecurityTrustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash...7.5 High
- sengled e1e-g7f firmwareSengled Dimmer Switch V0.0.9 contains a denial of service (DOS) vulnerability, which allows a...7.5 High
- jerryscriptJerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component...5.5 Medium
- jerryscriptJerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src...5.5 Medium
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component.5.5 Medium
- m-files serverUncontrolled Resource Consuption in M-Files Server7.5 High
- eclipse jetty, jetty.project +1 moreOutOfMemoryError for large multipart without filename in Eclipse Jetty5.3 Medium
- juniper jdpi-decoder engine, junos, juniper networks junos os +1 more +3 moreJunos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before...7.5 High
- whoapp whoAn issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a denial of service...7.5 High
- powerampapp powerampAn issue found in POWERAMP 925-bundle-play and Poweramp 954-uni allows a remote attacker to cause...7.5 High
- tikvTiKV 6.1.2 allows remote attackers to cause a denial of service (fatal error, with RpcStatus...7.5 High
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component.5.5 Medium
- vmware spring frameworkSpring Framework vulnerable to denial of service6.5 Medium
- ribose rnpRibose RNP before 0.16.3 may hang when the input is malformed.5.3 Medium
- siemens simatic cp 1242-7 v2, simatic cp 1243-1, simatic cp 1243-1 dnp3 (incl. siplus variants) +43 more +45 moreA vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions), SIMATIC CP 1243-1 ...7.5 High
- Show moreLoading…