CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- szad670401 szad670401/hyperlprDenial of Service (DoS) via Multipart Request in szad670401/hyperlpr7.5 High
- vllmvLLM denial of service via outlines unbounded cache on disk6.5 Medium
- parall jspdfjsPDF Bypass Regular Expression Denial of Service (ReDoS)8.7 High
- expr-lang exprMemory Exhaustion in Expr Parser with Unrestricted Input7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- omniauth saml, onelogin ruby-saml +1 moreruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses7.7 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability7.5 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Release 7.9.2 Denial of Service Vulnerabillity7.4 High
- linux, linux kernel +1 morepowerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC5.5 Medium
- linux, linux kernel +1 morebtrfs: fix double accounting race when btrfs_run_delalloc_range() failed7.8 High
- datalust seqAn issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message...6.5 Medium
- pmmp pocketmine-mpPocketMine-MP before 5.25.2 Denial of Service via explode6.9 Medium
- graphicsmagickJXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.4.3 Medium
OpenTelemetry.AutoInstrumentationNuGetDoS Vulnerability in TraceContextPropagator.Extract - OpenTelemetry.Api7.5 High- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreRing: some aes functions may panic when overflow checking is enabled in ring5.3 Medium
- djangoproject django, debian linux +1 moreDjango Vulnerable to Allocation of Resources Without Limits or Throttling5.0 Medium
- microsoft hololensA vulnerability in the pairing request method in Microsoft HoloLens 1 and 2 - Windows Holographic...6.5 Medium
- open-telemetry opentelemetry-dotnetOpenTelemetry .NET has a Denial of Service (DoS) Vulnerability in API Package7.5 High
- labredescefetrj wegiaDenial of Service (DoS) in WeGIA due to Recursive Crawling of Dynamic URLs9.2 Critical
- ruby-lang cgiCGI has Denial of Service (DoS) potential in Cookie.parse5.8 Medium
- cyberark endpoint privilege managerLack of rate-limiting in password change mechanism in CyberArk Endpoint Privilege Manager9.3 Critical
- joinmastodon mastodonMastodon's rate-limits are missing on `/auth/setup`5.3 Medium
- go ssh, golang.org/x/crypto golang.org/x/crypto/ssh +1 morePotential denial of service in golang.org/x/crypto7.5 High
- go-joseGo JOSE's Parsing Vulnerable to Denial of Service6.6 Medium
namada-appscrates.ioNamada-apps allows Excessive Computation in Mempool Validation9.2 Criticalnamada-appscrates.ioNamada-apps can Crash with Excessive Computation in Mempool Validation9.2 Critical- No product listedAn issue was discovered in Atos Eviden BullSequana XH2140 BMC before C4EM-125: OMF_C4E 101.05...7.7 High
- phpjabbers event ticketing systemA lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1...6.5 Medium
- phpjabbers cinema booking systemA lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0...5.3 Medium
- phpjabbers car park booking systemA lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Car Park...4.3 Medium
- phpjabbers car park booking systemA lack of rate limiting in the 'Email Settings' feature of PHPJabbers Car Park Booking System v3...4.3 Medium
- phpjabbers hotel booking systemA lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0...6.5 Medium
- palantir com.palantir.artifacts:artifactsFoundry artifacts denial of service6.5 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +9 more +11 moreOpenssh: denial-of-service in openssh5.9 Medium
- pimeys web-pushRust Web Push is vulnerable to a DoS attack via a large integer in a Content-Length header4.0 Medium
- getmonero moneroMonero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections.8.6 High
- schneider electric asco 5310 single-channel remote annunciator, asco 5350 eight channel remote annunciator +1 moreCWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could...8.7 High
- mercedes-benz headunit ntg6 mercedes-benz user experienceMercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB....7.5 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- learndashAn issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a...7.5 High
- linux, linux kernel +1 morescsi: storvsc: Ratelimit warning logs to prevent VM denial of service5.5 Medium
- ruby net-imapNet::IMAP vulnerable to possible DoS by memory exhaustion6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- apache james serverApache James: denial of service through the use of IMAP literals8.6 High
- projectfloodlight floodlightAn issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology...5.5 Medium
- projectfloodlight floodlightAn issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology...5.5 Medium
- ibm aspera sharesIBM Aspera Shares Denial of Service4.3 Medium
- f5 big-ip, big-ip next cnf, big-ip advanced firewall manager +1 more +3 moreBIG-IP AFM vulnerability8.7 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab7.5 High
- Show moreLoading…