CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All...7.1 High
- dell powerscale onefsDell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an allocation of resources without...6.2 Medium
- apple ipados, macos, tvos +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS...5.5 Medium
- ibm app connect enterpriseIBM App Connect Enterprise denial of service4.3 Medium
- blakeblackshear frigateIn Frigate, Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service6.8 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab4.3 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS...6.5 Medium
- oisf suricataSuricata 's http2 parser contains an improper compressed header handling can lead to resource starvation7.5 High
- red hat build of keycloak, data grid 8, fuse 7 +11 more +13 moreWildfly: no timeout for eap management interface may lead to denial of service (dos)4.1 Medium
- rjbs email-mime, fedoraproject fedora, rjbs email mime +2 moreAn excessive memory use issue (CWE-770) exists in Email-MIME, before version 1.954, which can...7.5 High
- linux, linux kernel, fedoraproject fedora +4 more +6 moretun: limit printing rate when illegal packet received by tun dev5.5 Medium
- No product listedThe O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for...7.5 High
- mattermost, mattermost server +1 moreMattermost fails to limit the number of active sessions4.3 Medium
- mattermost, mattermost server +1 moreExcessive resource consumption due to lack to request path size limits3.1 Low
- ibm websphere application server, websphere application server liberty +1 moreIBM WebSphere Application Server denial of service5.9 Medium
- freerdp, fedoraproject fedora +1 moreFreeRDP zgfx_decompress out of memory vulnerability7.5 High
- element-hq synapse, fedoraproject fedora +1 moreSynapse's V2 state resolution weakness allows DoS from remote room members6.5 Medium
- mealieMealie vulnerable to a DoS in recipe image importer (GHSL-2023-228)6.5 Medium
- mealieMealie contains a DoS vulnerability in recipe importer6.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()6.0 Medium
- oracle mysql server, netapp active iq unified manager, oncommand insight +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). ...4.9 Medium
- oracle graalvm, graalvm for jdk, jdk +8 more +10 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...3.7 Low
- mightypirates opencomputersOpenComputers Denial of Service using xpcall7.7 High
- mozilla firefox, firefox esr, thunderbird +2 moreThere was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server...3.7 Low
- lunary, lunary-ai lunary-ai/lunary +1 moreUnauthorized Radar Creation in lunary-ai/lunary7.5 High
- sixlabors imagesharpMemory Allocation with Excessive Size Value in SixLabors.ImageSharp5.3 Medium
- sigstore cosignCosign vulnerable to machine-wide denial of service via malicious artifacts4.2 Medium
- sigstore cosignCosign vulnerable to system-wide denial of service via malicious attachments4.2 Medium
- linux, linux kernel +1 morescsi: core: Fix scsi_mode_sense() buffer length handling5.5 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets7.5 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morex86, relocs: Ignore relocations in .notes section5.5 Medium
- siemens jt2go, parasolid, parasolid v35.1 +6 more +8 moreA vulnerability has been identified in Parasolid V35.1 (All versions < V35.1.254), Parasolid V36...4.8 Medium
- nvidia nemoNVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerab…8.6 High
- mattermost, mattermost server +1 moreDoS via a large number of User Preferences4.3 Medium
- cloudburstmc networkCloudburst Network DoS in RakNet connection handling8.6 High
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty denial of service5.9 Medium
- oisf libhtpExcessive CPU used on malformed traffic7.5 High
- linux, linux kernel +1 morefbcon: always restore the old font data in fbcon_do_set_font()5.5 Medium
- nghttp2, debian linux, fedoraproject fedora +4 more +6 moreReading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage5.3 Medium
- oisf suricataSuricata uses excessive resource use in malformed ssh traffic parsing7.5 High
amphp/http-clientPackagistamphp/http-client Denial of Service via HTTP/2 CONTINUATION Frames8.2 High- debian linux, linux kernel +1 moreRDMA/qedr: Fix qedr_create_user_qp error flow5.5 Medium
- linux, linux kernel +1 moredccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished().5.5 Medium
- linux, linux kernel +1 morepowerpc/kasan: Limit KASAN thread size increase to 32KB5.5 Medium
- debian linux, linux kernel +1 morenet: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()5.5 Medium
h2crates.ioh2 servers vulnerable to degradation of service with CONTINUATION Flood5.3 Medium- quic-goQUIC's Connection ID Mechanism vulnerable to Memory Exhaustion Attack7.5 High
- debian linux, linux kernel +1 moreppp_async: limit MRU to 64K5.5 Medium
- openatom openharmonyArkcompiler runtime has a stack overflow svulnerability3.3 Low
- Show moreLoading…