CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- parity frontierFrontier opcode SUICIDE touches too many storage values on large contracts7.5 High
- vrite, vriteio vriteio/vrite +1 moreAllocation of Resources Without Limits or Throttling in vriteio/vrite4.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and EX4000 Series: Denial of Service (DoS) on a large scale VLAN due to PFE hogging7.5 High
io.root.org.json:jsonRoot,org.json:jsonRoot +1 moreDuplicate Advisory: Denial of Service in JSON-Java7.5 High- opentelemetry, open-telemetry opentelemetry-go-contrib +1 moreOpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics7.5 High
- stleary json-javaDoS Vulnerability in JSON-Java7.5 High
- go standard library net/http, golang go, http2 +4 more +6 moreHTTP/2 rapid reset can cause excessive work in net/http7.5 High
- nettyNetty HttpContentEncoder: Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service6.9 Medium
- nettyNetty SPDY SETTINGS frame count materializes unbounded settings map7.5 High
- nettyNetty susceptible to HTTP/2 Reset Attack with different on-the-wire signature6.9 Medium
- netty, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, data grid 8.6.2 +7 more +9 moreNetty has unbounded pre-allocation in RedisArrayAggregator from RESP array length7.5 High
- netty, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, data grid 8.6.2 +8 more +10 moreNetty: SCTP reassembly nests buffers without bound7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes7.5 High
- nettyNetty: Denial of Service via Unbounded Headers in StompSubframeDecoder7.5 High
- netty, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, data grid 8.6.2 +7 more +9 moreNetty has Unbounded Direct Memory Consumption in its RedisDecoder7.5 High
- netty, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, data grid 8.6.2 +7 more +9 moreNetty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays7.5 High
- netty, io.netty netty-codec-mqtt, red hat amq broker 7.13.6 +8 more +10 moreNetty: Resource exhaustion in MqttDecoder5.3 Medium
- netty, io.netty netty-codec-http, netty-codec-http2 +37 more +39 moreNetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS7.5 High
- netty, io.netty netty-codec, netty-codec-compression +2 moreNetty: Lz4FrameDecoder resource exhaustion7.5 High
- netty, red hat cryostat 4, cryostat 4 on rhel 9 +37 more +39 moreNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass8.7 High
- nettyNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 High
- netty, debian linux +1 moreNetty HttpPostRequestDecoder can OOM5.3 Medium
- element-hq synapse, fedoraproject fedora +1 morematrix-synapse vulnerable to denial of service due to malicious server ACL events4.9 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +17 more +19 moreBIG-IP TCP Profile vulnerability7.5 High
- reportportal, reportportal service-api +1 moreReportPortal DoS vulnerability on creating a Launch with too many recursively nested elements6.3 Medium
- mattermost, mattermost server +1 moreDenial of Service via Opengraph Data Cache4.3 Medium
- mediawikiAn issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1...7.5 High
- wiresharkMemory Allocation with Excessive Size Value in Wireshark5.3 Medium
- hitachi ops center common servicesDoS Vulnerability in Hitachi Ops Center Common Services5.3 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreAllocation of Resources Without Limits or Throttling in ikus060/rdiffweb7.1 High
- cisco ios xe software, ios xe +1 moreA vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series...8.6 High
- xerial snappy-javaMissing upper bound check on chunk length in snappy-java7.5 High
- plone plone.rest, rest +1 moreplone.rest vulnerable to Denial of Service when ++api++ is used many times7.5 High
- lfedge eve, lf-edge, zededa eve os, linuxfoundation edge virtualization engine +2 moreFreely Allocate Buffer on The Stack With Data From Socket9.0 Critical
- contribsys faktoryFaktory Web Dashboard can lead to denial of service(DOS) via malicious user input7.5 High
- ovn open virtual network, fedora, red hat fast datapath for rhel 7 +6 more +8 moreService monitor mac flow is not rate limited5.3 Medium
- ormazabal ekorccp, ekorccp firmware, ekorrci +1 more +3 moreAllocation of Resources Without Limits or Throttling in Ormazabal products7.5 High
- freeswitchFreeSWITCH allows authorized users to cause a denial of service attack by sending re-INVITE with SDP containing duplicate codec names7.5 High
- discourseDiscourse DoS via SvgSprite cache6.5 Medium
- discourseDiscourse DoS via remote theme assets4.9 Medium
- discourseDiscourse DoS via 2FA and Security Key Names6.5 Medium
- discourseDiscourse vulnerable to DoS via drafts6.5 Medium
- strapiStrapi Improper Rate Limiting vulnerability7.3 High
- curl, fedoraproject fedora, microsoft windows 10 1809 +7 more +9 moreWhen curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed...7.5 High
- suse rke2, rancher rke2 +1 moreRKE2 supervisor port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack7.5 High
- k3sK3s apiserver port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack7.5 High
- go standard library crypto/tls, crypto tls, golang go +2 moreMemory exhaustion in QUIC connection handling in crypto/tls7.5 High
- open automation software oas platformAn improper resource allocation vulnerability exists in the OAS Engine configuration management...3.1 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLab5.3 Medium
- eclipse mosquittoIn Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that...5.8 Medium
- Show moreLoading…