CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- open-webui open-webui/open-webui, openwebui open webui +1 moreDenial of Service in open-webui/open-webui7.5 High
- async-graphqlasync-graphql vulnerable to Directive Overload7.5 High
- linux, linux kernel, siemens ruggedcom rst2428p +6 more +8 moreInput: uinput - reject requests with unreasonable number of slots5.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in visionOS 2.3,...6.5 Medium
- edirectoryPossible NLDAP Denial of Service attack Vulnerability7.6 High
- octavolabs vernemqA memory allocation issue in vernemq v2.0.1 allows attackers to cause a Denial of Service (DoS)...7.5 High
- linux, linux kernel +1 mores390/boot: Avoid possible physmem_info segment corruption5.5 Medium
- linux, linux kernel +1 morenouveau/firmware: use dma non-coherent allocator5.5 Medium
- yeti-platform yetiYeti affected by a Potential Denial of Service due to the One Milion Unicode characters attack5.3 Medium
- phoenix contact fl mguard 2102, fl mguard 2105, fl mguard 4102 pci +69 more +71 morePhoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.5.3 Medium
- axis communications ab osMarinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API alwaysmulti.cgi...6.5 Medium
- ibm mq, mq operator +1 moreIBM MQ denial of service5.5 Medium
- eclipse vert.xEclipse Vert.x gRPC server does not limit the maximum message size6.9 Medium
- discourse discourse-calendar, calendar +1 moreInsufficient control of region value length in discourse-calendar4.3 Medium
- apollographql apollo router, router, apollo-router +1 more +3 moreApollo Router Coprocessors may cause Denial-of-Service when handling request bodies7.5 High
- beckhoff twincat/bsd, ipc diagnostics package, twincat\/bsd +2 moreBeckhoff: Local Denial-of-Service vulnerability in TwinCAT/BSD and the IPC-Diagnostics package5.5 Medium
- apache tomcat, netapp ontap tools +1 moreApache Tomcat: Denial of Service8.6 High
- spring framework, vmware spring framework, netapp active iq unified manager +1 more +3 moreCVE-2024-38808: Spring Expression DoS Vulnerability4.3 Medium
- hex-rays ida proida64.dll in Hex-Rays IDA Pro through 8.4 crashes when there is a section that has many jumps...7.5 High
- rust-bitcoin miniscriptMiniscript allows stack consumption7.5 High
- open-xchange ox dovecot proVery large headers can cause resource exhaustion when parsing message. The message-parser...7.5 High
- open-xchange gmbh ox dovecot proHaving a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU...5.0 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredma: fix call order in dmam_free_coherent7.8 High
- ptc kepware thingworx kepware server, ge igs, ptc kepware kepserverex +1 more +3 morePTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling5.9 Medium
- lenovo printersA denial-of-service vulnerability was reported in some Lenovo printers that could allow an...6.5 Medium
- lenovo printersA denial-of-service vulnerability was reported in some Lenovo printers that could allow an...6.5 Medium
- lenovo printersA denial-of-service vulnerability was reported in some Lenovo printers that could allow an...6.5 Medium
- lenovo printersA denial-of-service vulnerability was reported in some Lenovo printers that could allow an...6.5 Medium
- lenovo printersA denial-of-service vulnerability was reported in some Lenovo printers that could allow an...6.5 Medium
- eugeny russh, warpgate project warpgate +1 moreRussh has an OOM Denial of Service due to allocation of untrusted amount7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP TMM vulnerability8.7 High
- aveva suitelink server, application server, batch management +3 more +5 moreAllocation of Resources Without Limits or Throttling in AVEVA SuiteLink Server8.7 High
- linux, linux kernel +1 moremm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit machines7.1 High
- zabbixAllocation of resources without limits or throttling (uncontrolled resource consumption)7.5 High
- linux, linux kernel +1 morewireguard: allowedips: avoid unaligned 64-bit memory accesses7.5 High
- linux, linux kernel +1 moremmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE5.5 Medium
- linux, linux kernel +1 moremm/shmem: disable PMD-sized page cache if needed5.5 Medium
- ruby rexmlREXML DoS vulnerability5.3 Medium
- ruby rexmlREXML DoS vulnerability5.3 Medium
- dahua ipc-hx8xxx and nvr4xxx, dahuasecurity ipc-hf8xxx firmware, ipc-hfs8449g-z7-led firmware +59 more +61 moreA vulnerability has been found in Dahua products.Attackers can send carefully crafted data...7.5 High
- linux, linux kernel +1 moreIB/core: Implement a limit on UMAD receive List7.5 High
com.graphql-java:graphql-javaMaven,io.root.com.graphql-java:graphql-javaRoot +1 moreGraphQL Java does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service5.3 Medium- linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morexdp: Remove WARN() from __xdp_reg_mem_model()5.5 Medium
- isc bind, bind 9 +1 moreSIG(0) can be used to exhaust CPU resources7.5 High
- isc bind, bind 9 +1 moreBIND's database will be slow if a very large number of RRs exist at the same name7.5 High
- isc bind, bind 9 +1 moreA flood of DNS messages over TCP may make the server unstable7.5 High
dnsjava:dnsjavaMaven,org.jitsi:dnssecjavaMaven +1 moreDNSJava vulnerable to KeyTrap - Denial-of-Service Algorithmic Complexity Attacks7.7 High- sixlabors imagesharpSixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder5.3 Medium
- rapid7 insightvmRapid7 InsightVM Protection Mechanism Failure4.3 Medium
- linux, linux kernel +1 morebpf: Fix overrunning reservations in ringbuf7.8 High
- Show moreLoading…