CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- elastic kibanaKibana allocation of resources without limits or throttling leads to crash6.5 Medium
- elastic elasticsearchElasticsearch allocation of resources without limits or throttling leads to crash6.5 Medium
- ibm txseries for multiplatformsIBM TXSeries for Multiplatforms denial of service7.5 High
- ibm txseries for multiplatformsIBM TXSeries for Multiplatforms denial of service7.5 High
- ibm safer paymentsIBM Safer Payments denial of service7.5 High
- t2bot matrix-media-repoDenial of service/high operating costs through unauthenticated downloads in Matrix Media Repo5.3 Medium
- wago 750-8100 (controller pfc100), 750-831 (controller bacnet/ip), 750-880 (controller eth) +1 more +3 moreWAGO: Denial of service in 750-8xx controller due to uncontrolled resource consumption7.5 High
- fortinet fortisiemA allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5...6.9 Medium
- fortinet fortiosAn allocation of resources without limits or throttling [CWE-770] vulnerability in FortiOS...4.8 Medium
- fortinet fortiosAn allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS...7.1 High
- openlinksw virtuosoAn issue in the sqlg_group_node component of openlink virtuoso-opensource v7.2.11 allows...7.5 High
- openlinksw virtuosoAn issue in the sqlg_place_dpipes component of openlink virtuoso-opensource v7.2.11 allows...7.5 High
- openlinksw virtuosoAn issue in the sqlg_hash_source component of openlink virtuoso-opensource v7.2.11 allows...7.5 High
- djangoproject django, debian linux +1 moreDjango has a potential denial-of-service vulnerability in IPv6 validation5.8 Medium
- samsung exynos 1080 firmware, exynos 1280 firmware, exynos 1330 firmware +14 more +16 moreAn issue was discovered in Samsung Mobile Processor and Modem Exynos 9820, 9825, 980, 990, 1080,...6.5 Medium
- ibm app connect enterprise certified containerIBM App Connect Enterprise Certified Container denial of service5.5 Medium
- ibm security qradar edrIBM Security QRadar EDR denial of service4.9 Medium
- go-gitgo-git clients vulnerable to DoS via maliciously crafted Git server replies7.5 High
- qualcomm qam8255p firmware, qam8295p firmware, qam8620p firmware +28 more +30 morePermissions, Privileges, and Access Controls issue in Automotive OS Platform7.5 High
- vercel next.jsNext.js Vulnerable to Denial of Service (DoS) with Server Actions5.3 Medium
- linux, linux kernel +1 moremedia: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE5.5 Medium
- google androidIn multiple locations, there is a possible failure to persist permissions settings due to...7.8 High
- trend micro, inc. micro id security, trendmicro id security +1 moreTrend Micro ID Security, version 3.0 and below contains a vulnerability that could allow an...6.5 Medium
- linux, linux kernel +1 moreRDMA/hns: Fix cpu stuck caused by printings during reset5.5 Medium
- linux, linux kernel +1 moreio_uring/tctx: work around xa_store() allocation error issue5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA denial-of-service issue was addressed with improved input validation. This issue is fixed in...7.5 High
github.com/clidey/whodb/coreGoWhoDB Allows Unbounded Memory Consumption in Authentication Middleware Can Lead to Denial of Service7.5 High- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- golang.org/x/net golang.org/x/net/htmlNon-linear parsing of case-insensitive content in golang.org/x/net/html5.3 Medium
- matterIn Matter (aka connectedhomeip or Project CHIP) through 1.4.0.0 before e3277eb, unlimited user...7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab4.3 Medium
- python protobufCrash due to uncontrolled recursion in protobuf crate5.9 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS...9.8 Critical
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2,...5.5 Medium
- bitcoin coreBitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a...5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- python software foundation cpythonUnbounded memory buffering in SelectorSocketTransport.writelines()8.7 High
- rpgprPGP Potential Resource Exhaustion when handling Untrusted Messages7.5 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreDenial of Service, DoS7.2 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreDenial of Service, DoS7.6 High
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreFilesize Check8.7 High
- djangoproject djangoDjango denial-of-service in django.utils.html.strip_tags()7.5 High
- element-hq synapseSynapse denial of service through media disk space consumption7.5 High
- element-hq synapseSynapse allows unsupported content types to lead to memory exhaustion8.2 High
- aedes project aedesAn issue in aedes v0.51.2 allows attackers to cause a Denial of Service(DoS) via a crafted request.7.5 High
- kludex python-multipartpython-multipart has a Denial of service (DoS) via deformation `multipart/form-data` boundary7.5 High
- rizinrizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via...7.5 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- tornadoweb tornadoTornado has HTTP cookie parsing DoS vulnerability7.5 High
- apereo opencastSearching Opencast may cause a denial of service6.5 Medium
- Show moreLoading…