CWE-774: File Descriptor Exhaustion
The product allocates file descriptors or handles on behalf of an actor without imposing any restrictions on how many descriptors can be allocated, in violation of the intended security policy for that actor.
Also known as Allocation of File Descriptors or Handles Without Limits or Throttling.
A kind of CWE-770 Allocation of Resources Without Limits or Throttling.
From the CWE List. © The MITRE Corporation.
Newest
- netapp storagegrid CVE-2026-22056 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) 2.3 Low
- spinframework containerd-shim-spin, spin, spinkube +2 more Spin has memory leaks in various WIT interfaces 6.9 Medium
- bytecodealliance wasmtime Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion 6.9 Medium
- abb aspect-enterprise, matrix series, nexus series +2 more LARGECONTENT - device disk overutilization 7.0 High
-
@sentry/astronpm,@sentry/aws-serverlessnpm,@sentry/bunnpm +8 more +10 more Potential DoS when using ContextLines integration 3.7 Low - minio Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits or Throttling (similar to CWE-774) vulnerability in write-to-RAM that can result… 7.5 High