CWE-770: Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
A kind of CWE-400 Uncontrolled Resource Consumption.
From the CWE List. © The MITRE Corporation.
Newest
- adnanh webhookwebhook through 2.8.3 Memory Exhaustion via Oversized Request Body8.7 High
- apache software foundation storm drpcApache Storm DRPC: Unauthenticated Unbounded Memory Growth in DRPC9.8 Critical
- mattermost, mattermost server +1 moreFix authenticated members disabling file content indexing server-wide via extraction pool exhaustion4.3 Medium
- tornadoweb tornadoTornado before 6.5.8 Memory Amplification DoS via multipart8.7 High
- tootallnate java-websocketTooTallNate Java-WebSocket Fragmentation Draft_6455.java processFrameContinuousAndNonFin allocation of resources6.9 Medium
- unrealircdThe webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP...8.7 High
- simulpiscator airsaneAirSane has a Remote Denial of Service (OOM) via Unvalidated Content-Length in HTTP Server7.5 High
- multipartymultiparty vulnerable to Denial of Service via unbounded part-header accumulation7.5 High
- traefikTraefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded5.3 Medium
- traefikTraefik v2.8.2 through v3.6 HTTP/3 Timeout Bypass6.9 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout7.5 High
- modelcontextprotocol io.modelcontextprotocol:kotlin-sdk, io.modelcontextprotocol:kotlin-sdk-client, io.modelcontextprotocol:kotlin-sdk-core +1 more +3 moreMCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS)6.2 Medium
- n8nn8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint8.7 High
- microsoft asp.net core odata, aspnetcore.odata +1 moreASP.NET Core Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreWindows SMB Server Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreActive Directory Federation Services (AD FS) Denial of Service Vulnerability5.9 Medium
- microsoft openapi.netMicrosoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion7.5 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreUncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Service8.7 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreUncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service7.1 High
- siemens reyrolle 7sr5A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The web server does...8.7 High
- automattic woocommerceWordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerability7.5 High
- java-json-tools jackson-coreutilsjava-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources6.9 Medium
- asus armoury crateAllocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to...5.7 Medium
- strukturag libheiflibheif: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle limits, causing CPU/memory amplification DoS7.5 High
- ash-project ash authentication oauth2 serverUnauthenticated authorize requests create unbounded, never-expiring CIMD client rows and cache entries in ash_authentication_oauth2_server8.2 High
- mispMISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding8.7 High
- hcl software myxalyticsHCL MyXalytics is affected by multiple security vulnerabilities.3.5 Low
- pmmp pocketmine-mpPocketMine-MP before 4.12.3 Denial of Service via Unauthenticated Sessions6.9 Medium
- libp2p rust-libp2plibp2p-rust: Gossipsub GRAFT topics unbounded growth8.7 High
- ramon-victor freegpt-webuiramon-victor freegpt-webui Jailbreak Mode backend.py getJailbreak allocation of resources6.9 Medium
- chroma-core chromaChroma 1.5.9 Unbounded HNSW Index Parameters Memory Exhaustion8.7 High
- elixir-mint mintUnbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoS8.2 High
- No product listedRobots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it queries4.3 Medium
- siyuan-note siyuanSiYuan before v3.8.2 Denial of Service via Auth Throttle8.7 High
- siyuan-note siyuanSiYuan before v3.8.2 Unbounded Session Creation via Basic Auth7.1 High
- siyuan-note siyuanSiYuan before v3.8.2 Denial of Service via unauthenticated UI-process registration8.7 High
- themoos core-moosMOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustion8.7 High
- mit moos-ivpMOOS-IvP through 24.8.1 pMarineViewer Unbounded Memory Consumption via NODE_REPORT8.7 High
- mit moos-ivpMOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State Retention8.7 High
- mit moos-ivpMOOS-IvP through 24.8.1 pRealm Unbounded REALMCAST_REQ Subscription Denial of Service8.7 High
- migrateguru migrate guru – site migration & cloningWordPress Migrate Guru – Site Migration & Cloning plugin <= 6.65 - Denial of Service Attack vulnerability7.5 High
- malcare securityWordPress MalCare Security plugin <= 6.69 - Denial of Service Attack vulnerability7.5 High
- nousresearch hermes-agentNousResearch hermes-agent Electron Main Process main.ts resourceBufferFromUrl allocation of resources5.3 Medium
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 moreGfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk4.7 Medium
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 moreGfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal4.7 Medium
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 morePrevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh7.5 High
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 morePrevent DoS on deadlocked established channel in golang.org/x/crypto/ssh7.5 High
- malach-it boruta-serverBoruta: Authenticated atom-exhaustion DoS in BorutaIdentityWeb.UserSettingsController.update/27.1 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata Fields5.3 Medium
- elastic filebeatAllocation of Resources Without Limits or Throttling in Filebeat Leading to Denial of Service6.5 Medium
- Show moreLoading…