CWE-789: Stack Exhaustion
The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.
Also known as Memory Allocation with Excessive Size Value.
A kind of CWE-770 Allocation of Resources Without Limits or Throttling.
From the CWE List. © The MITRE Corporation.
Newest
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service6.5 Medium
- sixlabors imagesharpSixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder5.3 Medium
- ibm mqIBM MQ denial of service5.9 Medium
- grpc, grpc grpc-node +1 more@grpc/grpc-js can allocate memory for incoming messages well above configured limits5.3 Medium
- sixlabors imagesharpMemory Allocation with Excessive Size Value in SixLabors.ImageSharp5.3 Medium
amphp/http-clientPackagistamphp/http-client Denial of Service via HTTP/2 CONTINUATION Frames8.2 High- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more +4 moreLibvirt: negative g_new0 length can lead to unbounded memory allocation6.2 Medium
- isc bind, bind 9, netapp active iq unified manager +2 moreSpecific recursive query patterns may lead to an out-of-memory condition7.5 High
- linux kernel, fedoraproject fedora +1 moredm_table_create in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to (in...5.5 Medium
- red hat eap 7.4.13, jboss enterprise application platform 7.4 for rhel 8, jboss enterprise application platform 7.4 for rhel 9 +2 more +4 moreEap-7: heap exhaustion via deserialization7.5 High
- zoom, zoom virtual desktop infrastructure, zoom video communications, inc. rooms client for windows and zoom vdi client +2 moreUncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom...4.3 Medium
- wiresharkMemory Allocation with Excessive Size Value in Wireshark5.3 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for...6.1 Medium
- redhat undertow, red hat build of quarkus, data grid 8 +25 more +27 moreUndertow: outofmemoryerror due to @multipartconfig handling7.5 High
- lfedge eve, lf-edge, zededa eve os, linuxfoundation edge virtualization engine +2 moreFreely Allocate Buffer on The Stack With Data From Socket9.0 Critical
- contribsys faktoryFaktory Web Dashboard can lead to denial of service(DOS) via malicious user input7.5 High
- eclipse mosquittoIn Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that...5.8 Medium
- google grpcDenial-of-Service in gRPC7.5 High
- cisco unified communications manager im and presence serviceA vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM ...7.5 High
- vyperlang vyperVyper storage allocator overflow7.5 High
- cisco nx-os system software in aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches in ACI Mode Link Layer Discovery Protocol Memory Leak Denial of Service Vulnerability7.4 High
- oretnom23 raffle draw systemRaffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- search docconvdocconv XMLToText memory allocation4.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crash6.5 Medium
- apache kafkaUnauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers7.5 High
- binary project binarySlice Memory Allocation with Excessive Size Value in binary8.8 High
- codesys gateway server v2, gateway +1 moreCODESYS Gateway server prone to denial of service attack due to excessive memory allocation7.5 High
- opcfoundation ua .net standard stackMemory Allocation with Excessive Size Value in OPCFoundation.NetStandard.Opc.Ua.Core7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_sed denial of service7.5 High
- cisco sd-wan vedge routerCisco SD-WAN vEdge Routers Denial of Service Vulnerability5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series: When storm control profiling is enabled and a device is under an active storm, a Heap-based Buffer Overflow in the PFE will caus…7.5 High
- sap web dispatcher, netweaver, sap se netweaver (internet communication manager) +2 moreDue to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager,...7.5 High
- weka interest security scannerWEKA INTEREST Security Scanner Portscan memory allocation4.3 Medium
- parallels desktop, parallels +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- parallels desktop, parallels +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- parallels desktop, parallels +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...7.5 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability5.5 Medium
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +9 more +11 moreA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny file5.5 Medium
evm-corecrates.ioMemory over-allocation in evm-coreNo score- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +16 more +18 moreA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file5.5 Medium
- abb ac500 v2 products with onboard ethernet, ac500 cpu firmware +1 moreAC500 V2 unauthenticated crafter packet vulnerability8.6 High
- cisco data center network managerCisco Data Center Network Manager Information Disclosure Vulnerability5.5 Medium
- cisco expressway, telepresence video communication server, telepresence video communication server (vcs) expressway +2 moreCisco Expressway Series and TelePresence Video Communication Server Denial of Service Vulnerability5.9 Medium
- tendermintDenial of service in Tendermint3.1 Low
- kubernetes, fedoraproject fedora +1 moreKubernetes API server denial of service5.3 Medium
- kubernetes, fedoraproject fedora +1 moreKubernetes kubelet denial of service4.3 Medium
- eclipse vert.x, the eclipse foundation eclipse vert.x +1 moreExcessive memory allocation6.5 Medium
- debian linux, eclipse mosquitto, the eclipse foundation eclipse mosquitto +2 moreIn Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file,...7.5 High
- Show moreLoading…