CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla firefox, firefox esr, thunderbird +2 moreError reporting methods in SpiderMonkey could have triggered an Out of Memory Exception6.5 Medium
- opto 22 snap pac s1, opto22 snap pac s1 firmware +1 moreAn adversary could cause a continuous restart loop to the entire device by sending a large...6.8 Medium
- opto 22 snap pac s1, opto22 snap pac s1 firmware +1 moreUncontrolled Resource Consumption in OPTO 22 SNAP PAC S1 Built-In Web Server6.8 Medium
- gnu binutils, fedoraproject fedora, netapp ontap select deploy administration utility +2 moreGNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability...5.5 Medium
- thoughtworks node-worker-threads-poolSUCHMOKUO node-worker-threads-pool denial of service Vulnerability6.5 Medium
- faucet ryuFaucetSDN Ryu Denial of Service Vulnerability7.5 High
- faucet ryuFaucetSDN Ryu Denial of Service Vulnerability7.5 High
- google grpcDenial-of-Service in gRPC7.5 High
- libp2p go-libp2plibp2p nodes vulnerable to attack using large RSA keys7.5 High
- siemens ruggedcom i800, ruggedcom i800nc, ruggedcom i801 +150 more +152 moreA vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801,...7.5 High
- siemens parasolid, parasolid v34.1, parasolid v35.0 +5 more +7 moreA vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35...4.8 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreAllocation of Resources Without Limits or Throttling in ikus060/rdiffweb4.2 Medium
- golang image, golang.org/x/image golang.org/x/image/tiff, fedoraproject fedora +2 moreExcessive resource consumption in golang.org/x/image/tiff6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab4.3 Medium
- ngsurveyData Illusion Survey Software Solutions ngSurvey version 2.4.28 and below is vulnerable to Denial...7.5 High
- mozilla firefox, firefox esr, debian linux +2 moreIn some circumstances, a stale value could have been used for a global variable in WASM JIT...5.3 Medium
- discourseDiscourse vulnerable to ossible DDoS due to unbounded limits in various controller actions5.3 Medium
- discourseDiscourse vulnerable to DoS via defer queue4.3 Medium
- discourseDiscourse vulnerable to DoS via post edit reason4.3 Medium
- cncf crossplaneCrossplane vulnerable to denial of service from large image3.4 Low
- getkirby kirbyKirby vulnerable to denial of service from unlimited password lengths5.3 Medium
- b&r industrial automation automation runtimeAllocation of Resources Without Limits or Throttling, Improper Initialization vulnerability in B...8.6 High
- fedora extra packages for enterprise linux 7, fedora, libssh +3 more +5 moreProcessing sftp server read may cause null dereference3.1 Low
- dell wyse management suiteWyse Management Suite versions prior to 4.0 contain a denial-of-service vulnerability. An...4.9 Medium
- crestron 3-series control systems, cp3-gv 6506034 firmware, cp3 6504877 firmware +1 more +3 moreOn Crestron 3-Series Control Systems before 1.8001.0187, crafting and sending a specific BACnet...7.5 High
- zabbixLimited control of resource utilization in JS preprocessing5.9 Medium
- siemens simatic mv540 h, simatic mv540 s, simatic mv550 h +9 more +11 moreA vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S ...8.6 High
- eclipse jettyMadeYouReset HTTP/2 vulnerability7.7 High
- eclipse jettyJetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks5.9 Medium
- eclipse jettyJetty PushSessionCacheFilter can cause remote DoS attacks3.1 Low
- eclipse jetty, debian linux, eclipse jetty.project +2 more +4 moreJetty connection leaking on idle timeout when TCP congested7.5 High
- ibm watson cp4d data stores, cloud pak for data +1 moreIBM Watson CP4D Data Stores denial of service5.9 Medium
- wallabagwallabag Profile Config config allocation of resources3.5 Low
- joinmastodon mastodonMastodon vulnerable to Denial of Service through slow HTTP responses7.5 High
- zope products.cmfcorezopefoundation's Products.CMFCore vulnerable to unauthenticated denial of service and crash via unchecked use of input with Python's marshal module7.5 High
- cometbftCometBFT PeerState JSON serialization deadlock3.7 Low
- cisco unified communications manager im and presence serviceA vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM ...7.5 High
- apple ipados, macos, ios and ipados +1 more +3 moreA denial-of-service issue was addressed with improved memory handling. This issue is fixed in iOS...5.5 Medium
- monetdbAn issue in the GDKfree component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to...7.5 High
- monetdbAn issue in the gc_col component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to...7.5 High
- monetdbAn issue in the list_append component of MonetDB Server v11.45.17 and v11.46.0 allows attackers...7.5 High
- monetdbAn issue in the cs_bind_ubat component of MonetDB Server v11.45.17 and v11.46.0 allows attackers...7.5 High
- monetdbAn issue in the BLOBcmp component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to...7.5 High
- monetdbAn issue in the log_create_delta component of MonetDB Server v11.45.17 and v11.46.0 allows...7.5 High
- monetdbAn issue in the sql_trans_copy_key component of MonetDB Server v11.45.17 and v11.46.0 allows...7.5 High
- tp-link tl-wr841n firmware, tl-wr940n firmware, tl-wr941nd firmware +2 moreAn issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N...7.7 High
- isc bind, bind 9, debian linux +7 more +9 morenamed's configured cache size limit can be significantly exceeded7.5 High
- nettynetty-handler SniHandler 16MB allocation6.5 Medium
- huawei emui, harmonyos +1 moreVulnerability of system restart triggered by abnormal callbacks passed to APIs.Successful...7.5 High
- huawei emuiConfiguration defects in the secure OS module.Successful exploitation of this vulnerability will...7.5 High
- Show moreLoading…