CWE-400

High likelihood

Uncontrolled Resource Consumption

Parent: CWE-664 - Improper Control of a Resource Through its Lifetime

The product does not properly control the allocation and maintenance of a limited resource.

3,134 vulnerabilities with CWE-400
CVE-2024-30105 HIGH
.NET 8.0.0-8.0.6 and Visual Studio 2022 17.4.0-17.4.20 - Denial of Service
CVSS 7.5
CVE-2024-39895 MEDIUM
Directus < 10.12.0 - Denial of Service via GraphQL Field Duplication
CVSS 6.5
CVE-2024-39479 HIGH
Linux Kernel 6.2-6.6.33, 6.7-6.9.4, 6.10 - Use-After-Free in i915 DRM HWMon Component
CVSS 7.8
CVE-2024-6434 LOW
Premium Addons for Elementor <4.10.35 - DoS
CVSS 3.1
CVE-2024-34750 HIGH
Apache Tomcat 9.0.0-9.0.89, 10.1.0-M1-10.1.24, 11.0.0-M1-11.0.0-M20 - Denial of Service via HTTP/2 Stream Miscount
CVSS 7.5
CVE-2024-6126 LOW
Red Hat Enterprise Linux 9 - Authenticated Denial of Service via pam_env user_readenv Option
CVSS 3.2
CVE-2024-6427 HIGH
MESbook 20221021.03 - Uncontrolled Resource Consumption
CVSS 7.5
CVE-2024-22104 MEDIUM
Jungo WinDriver <12.5.1 - Memory Corruption
CVSS 5.5
CVE-2024-22102 MEDIUM
Jungo WinDriver < 12.6.0 - Denial of Service via Local Blue Screen Trigger
CVSS 5.5
CVE-2024-4557 MEDIUM
GitLab < 16.11.5, 17.0 < 17.0.3, 17.1 < 17.1.1 - Denial of Service via Banzai Pipeline
CVSS 6.5
CVE-2024-1816 MEDIUM
GitLab 12.0-16.11.4, 17.0-17.0.2, 17.1 - Denial of Service via Crafted OpenAPI File
CVSS 5.3
CVE-2024-38520 MEDIUM
SoftEtherVPN <= 5.02.5183 - Unauthenticated Amplification Attack via L2TP
CVSS 5.3
CVE-2024-5013 HIGH
WhatsUp Gold < 23.1.3 - Unauthenticated Denial of Service via SetAdminPassword Installation Step
CVSS 7.5
CVE-2024-5011 HIGH
WhatsUp Gold < 23.1.3 - Unauthenticated Denial of Service via TestController Chart Request
CVSS 7.5
CVE-2024-39462 CRITICAL
Linux Kernel 6.6-6.6.33, 6.6.34-6.9.4, 6.10 - Uncontrolled Resource Consumption via clk_hw_onecell_data Array Access
CVSS 9.8
CVE-2024-5216 HIGH
AnythingLLM < 1.0.0 - Denial of Service via Uncontrolled Username Size
CVSS 7.5
CVE-2024-38384 HIGH
Linux Kernel - Uncontrolled Resource Consumption via List Corruption in blk-cgroup
CVSS 8.4
CVE-2024-38616 HIGH
Linux Kernel 5.17-6.9.3 - Uncontrolled Resource Consumption in carl9170_tx_release
CVSS 8.2
CVE-2024-23443 MEDIUM
Kibana 7.0.0-7.17.22 - Authenticated Denial of Service via Malicious Osquery Pack Upload
CVSS 4.9
CVE-2024-37904 MEDIUM
Minder < 0.0.52 - Denial of Service via Git Repository Clone
CVSS 5.7
CVE-2024-36543 CRITICAL
STRIMZI Project <= 0.41.0 - Unauthenticated Uncontrolled Resource Consumption via MirrorMaker Kafka REST API
CVSS 9.8
CVE-2024-32912 MEDIUM
Android - Local Denial of Service via Test/Debugging Code
CVSS 5.5
CVE-2024-32902 HIGH
Android - Remote Denial of Service via Malformed Cellular Packet
CVSS 7.5
CVE-2024-31399 MEDIUM
Cybozu Garoon 5.0.0-5.15.2 - Denial of Service via Crafted Mail Processing
CVSS 6.5
CVE-2024-34688 HIGH
SAP NetWeaver AS Java - Denial of Service via Meta Model Repository Services
CVSS 7.5
Details
Vulnerabilities 3,134
Exploit Likelihood High