CWE-400

High likelihood

Uncontrolled Resource Consumption

Parent: CWE-664 - Improper Control of a Resource Through its Lifetime

The product does not properly control the allocation and maintenance of a limited resource.

3,152 vulnerabilities with CWE-400
CVE-2017-5867 MEDIUM
ownCloud < 8.1.11, 8.2.x < 8.2.9, 9.0.x < 9.0.7, 9.1.x < 9.1.3 - Authenticated Denial of Service via One-Bit BMP File
CVSS 6.5
CVE-2017-5972 HIGH
Linux Kernel 3.0.0-3.19.8 - Denial of Service via TCP SYN Flood
CVSS 7.5
CVE-2017-5544 MEDIUM
FiberHome Fengine S5800 Firmware - Unauthenticated Denial of Service via SSH Login Timeout Exhaustion
CVSS 5.9
CVE-2017-5351 HIGH
Samsung Mobile Note - Denial of Service via VR Service Thread Exhaustion
CVSS 7.5
CVE-2016-1544 LOW
nghttp2 < 1.7.1 - Denial of Service via Memory Exhaustion
CVSS 3.3
CVE-2016-7068 MEDIUM
PowerDNS Authoritative < 3.4.11 and Recursor < 3.7.4 - Unauthenticated Denial of Service via Crafted DNS Queries
CVSS 5.3
CVE-2016-7072 MEDIUM
PowerDNS Authoritative < 3.4.11 and 4.0.2 - Unauthenticated Denial of Service via TCP Connection Exhaustion
CVSS 5.3
CVE-2016-9040 MEDIUM
Joyent SmartOS - Denial of Service via Hyprlofs Ioctl HYPRLOFSADDENTRIES Command
CVSS 5.5
CVE-2016-9596 MEDIUM
Redhat Jboss Core Services < 2.9.4 - Denial of Service
CVSS 6.5
CVE-2016-8611 MEDIUM
OpenStack Glance - Denial of Service via Unbounded Image Upload
CVSS 4.3
CVE-2016-10724 HIGH
Bitcoin Core < 0.13.0 - Denial of Service via Remote Network Alert System
CVSS 7.5
CVE-2016-10544 MEDIUM
uws 0.10.0-0.10.8 - Denial of Service via WebSocket Message Decompression
CVSS 5.9
CVE-2016-10542 HIGH
WS < 1.1.0 - Denial of Service
CVSS 7.5
CVE-2016-10540 HIGH
minimatch < 3.0.1 - Regular Expression Denial of Service via Pattern Parameter
CVSS 7.5
CVE-2016-10539 HIGH
negotiator < 0.6.0 - Regular Expression Denial of Service via Accept-Language Header
CVSS 7.5
CVE-2016-10527 HIGH
riot-compiler < 2.3.22 - Denial of Service via Catastrophic Backtracking
CVSS 7.5
CVE-2016-10524 HIGH
i18n-node-angular < 1.4.0 - Denial of Service via Unrestricted REST API Endpoint
CVSS 8.2
CVE-2016-10523 HIGH
mqtt-packet < 3.4.6 - Denial of Service via Crafted MQTT Packets
CVSS 7.5
CVE-2016-10521 HIGH
jshamcrest 0.6.7-0.7.0 - Regular Expression Denial of Service in Email Address Validator
CVSS 7.5
CVE-2016-10520 HIGH
jadedown < 0.0.3 - Regular Expression Denial of Service
CVSS 7.5
CVE-2016-8627 MEDIUM
admin-cli <3.0.0.alpha25, 2.2.1.cr2 - CSRF
CVSS 4.3
CVE-2016-9589 HIGH
Red Hat JBoss WildFly Application Server < 10.1.0 - Denial of Service via HTTP Header Cache Exhaustion
CVSS 7.5
CVE-2016-8610 HIGH
OpenSSL 0.9.8 1.0.1 1.0.2-1.0.2h 1.1.0 - Denial of Service via ALERT Packet Processing
CVSS 7.5
CVE-2016-8734 MEDIUM
Apache Subversion <1.8.16, <1.9.4 - DoS
CVSS 6.5
CVE-2016-6312 MEDIUM
Red Hat Enterprise Linux 5.11 - Authenticated Denial of Service via mod_dontdothat Entity Expansion
CVSS 6.5
Details
Vulnerabilities 3,152
Exploit Likelihood High