CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to...5.5 Medium
- google androidIn multiple functions of SnoozeHelper.java, there is a possible persistent denial of service due...5.5 Medium
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty denial of service5.9 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab4.3 Medium
- apache http server, fedoraproject fedora, netapp ontap +2 moreApache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames7.5 High
- couchbase serverAn issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1....7.5 High
- hewlett packard enterprise (hpe) icewall gen11, icewall sso agentA security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a...6.5 Medium
- linux, linux kernel +1 morethermal: intel: hfi: Add syscore callbacks for system-wide PM7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +5 more +7 moreext4: avoid online resizing failures due to oversized flex bg5.5 Medium
- emilianavt vseefaceVSeeFace through 1.13.38.c2 allows attackers to cause a denial of service (application hang) via...7.5 High
- linux, linux kernel +1 moreUSB: usbfs: Don't WARN about excessively large memory allocations5.5 Medium
- linux, linux kernel +1 morenet: lantiq: fix memory corruption in RX ring9.8 Critical
varnishAlmaLinux,rh-varnish6-varnishRed Hat,rh-varnish6-varnish-develRed Hat +10 more +12 moreVarnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise...7.5 High- isaacs node-tar, tar +1 morenode-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation6.5 Medium
- firebirdsql firebirdServer crash when using specific form of SET BIND statement7.5 High
- linux, linux kernel +1 morenvmet: fix freeing unallocated p2pmem7.5 High
- mattermost, mattermost server +1 moreMattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before...4.3 Medium
- mattermost, mattermost server +1 moreResource Exhaustion via the Invitation Feature3.1 Low
- opentext netiq privileged account managerInsecure renegotiation in SSL protocol caused Denial of service attack in Privileged Account Manager8.6 High
- cloudflare quicheUnlimited resource allocation by QUIC CRYPTO frames flooding in quiche5.9 Medium
- latchset jwcrypto, debian linux +1 moreJWCrypto vulnerable to JWT bomb Attack in `deserialize` function6.8 Medium
- linux, linux kernel +1 morepowerpc/lib: Validate size for vector operations7.8 High
- go standard library net/textprotoMemory exhaustion in multipart form parsing in net/textproto and net/http6.5 Medium
- vmware esxi, fusion, workstation +1 more +3 moreInformation disclosure vulnerability7.1 High
- linux, linux kernel +1 moreBluetooth: hci_codec: Fix leaking content of local_codecs5.5 Medium
- linux, linux kernel +1 moreHID: sony: Fix a potential memory leak in sony_probe()6.0 Medium
- linux, linux kernel +1 morecrypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map5.5 Medium
- linux, linux kernel +1 morearm64/sme: Always exit sme_alloc() early with existing storage5.5 Medium
- mattermost, mattermost server +1 moreMattermost fails to limit the number of role names4.3 Medium
- cisco nx-os software, nx-os +1 moreA vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS...8.6 High
- couchbase serverAn issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of...6.5 Medium
- oisf libhtp, fedoraproject fedora +1 moreLibHTP unbounded folded header handling leads to denial service7.5 High
- oisf suricata, fedoraproject fedora +1 morecrafted traffic can cause denial of service7.5 High
- oisf suricata, fedoraproject fedora +1 moreSuricata's pgsql: memory exhaustion use on record parsing7.5 High
- mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 moreKerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5...7.5 High
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics Mobile Server denial of service6.5 Medium
- silabs.com ember znet sdk, silabs emberznet, emberznet sdk +2 morePotential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer5.3 Medium
- m-files serverDenial of service condition in M-Files Server4.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal vulnerable to Denial of Service5.0 Medium
- fedoraproject fedora, moodle +1 moreMsa-24-0001: denial of service risk in file picker unzip functionality7.5 High
- apache commons compressApache Commons Compress: OutOfMemoryError unpacking broken Pack200 file5.5 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). ...4.4 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreBIG-IP SSL Client Certificate LDAP and CRLDP Authentication profiles vulnerability7.5 High
- f5 big-ip, big-ip advanced firewall manager +1 moreF5 AFM Signature Matching Vulnerability7.5 High
- isc bind, bind 9, netapp active iq unified manager +2 moreSpecific recursive query patterns may lead to an out-of-memory condition7.5 High
- fedoraproject fedora, isc bind, microsoft windows server 2008 +10 more +12 moreCertain DNSSEC aspects of the DNS protocol (in RFC 4035 and related RFCs) allow remote attackers...7.5 High
- badge.team hacker hotel badge 2024DoS attack when broadcasting billboard messages6.5 Medium
- connect2id nimbus jose\+jwtDenial of Service in Connect2id Nimbus JOSE+JWT7.5 High
- objectcomputing openddsIn OpenDDS through 3.27, there is a segmentation fault for a DataWriter with a large value of...7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- Show moreLoading…