CWE-770

High likelihood

Allocation of Resources Without Limits or Throttling

Parent: CWE-400 - Uncontrolled Resource Consumption

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

1,867 vulnerabilities with CWE-770
CVE-2024-27268 MEDIUM
IBM WebSphere Application Server Liberty <24.0.0.4 - DoS
CVSS 5.9
CVE-2024-28871 HIGH
libhtp 0.5.46 - Denial of Service via Malformed Request Parsing
CVSS 7.5
CVE-2024-28182 MEDIUM
nghttp2 < 1.61.0 - Denial of Service via Unbounded HTTP/2 CONTINUATION Frames
CVSS 5.3
CVE-2024-22189 HIGH
quic-go < 0.42.0 - Denial of Service via NEW_CONNECTION_ID Frame Flood
CVSS 7.5
CVE-2024-26798 MEDIUM
Linux Kernel - Denial of Service via Font Data Restoration Failure in fbcon
CVSS 5.5
CVE-2024-28870 HIGH
Suricata < 6.0.17 - Denial of Service via SSH Banner Parsing
CVSS 7.5
CVE-2024-26743 MEDIUM
Linux Kernel 4.11-6.7.6 - Resource Exhaustion via RDMA/qedr User QP Creation
CVSS 5.5
CVE-2024-26741 MEDIUM
Linux Kernel 6.1-6.1.79, 6.2-6.6.18, 6.7-6.7.6 - Resource Exhaustion via DCCP/TCP Socket Connection Failure Handling
CVSS 5.5
CVE-2024-26710 MEDIUM
Linux Kernel - Denial of Service via KASAN Thread Size Increase
CVSS 5.5
CVE-2024-26707 MEDIUM
Linux Kernel 5.9-6.7.6 DoS via HSR Supervision Frame Resource Exhaustion
CVSS 5.5
CVE-2024-29086 LOW
OpenHarmony < 3.2.4 - Denial of Service via Stack Overflow
CVSS 3.3
CVE-2024-26675 MEDIUM
Linux Kernel - Denial of Service via PPP Async MRU Allocation
CVSS 5.5
CVE-2024-22353 MEDIUM
IBM WebSphere Application Server Liberty <24.0.0.4 - DoS
CVSS 5.9
CVE-2024-2818 MEDIUM
GitLab < 16.8.5, 16.9 < 16.9.3, 16.10 < 16.10.1 - Denial of Service via Label Description Parameter
CVSS 4.3
CVE-2024-26577 HIGH
VSeeFace through 1.13.38.c2 - Denial of Service via Spoofed UDP Packet
CVSS 7.5
CVE-2024-22436 MEDIUM
HPE IceWall Gen11 and SSO Agent - Denial of Service via Resource Exhaustion
CVSS 6.5
CVE-2024-26646 MEDIUM
Linux Kernel - Memory Corruption via HFI Table Buffer Handling
CVSS 5.5
CVE-2024-29025 MEDIUM
Netty < 4.1.108 - Denial of Service via HttpPostRequestDecoder
CVSS 5.3
CVE-2024-30156 HIGH
Varnish Cache <7.3.2-6.0.13 LTS - DoS
CVSS 7.5
CVE-2024-28863 MEDIUM
node-tar < 6.2.1 - Denial of Service via Excessive Sub-Folder Creation
CVSS 6.5
CVE-2024-28102 MEDIUM
jwcrypto < 1.5.6 - Denial of Service via Malicious JWE Token
CVSS 6.8
CVE-2024-2446 MEDIUM
Mattermost <8.1.10, <9.2.6, <9.3.2, <9.4.3 - DoS
CVSS 4.3
CVE-2024-28053 LOW
Mattermost Server 8.1.0-8.1.9 - Denial of Service via Large Email Payload
CVSS 3.1
CVE-2024-1765 MEDIUM
Cloudflare Quiche < 0.19.2 - Denial of Service via 1-RTT CRYPTO Frame Flood
CVSS 5.9
CVE-2024-26618 MEDIUM
Linux Kernel - Resource Leak and State Corruption in SME Storage Allocation
CVSS 5.5
Details
Vulnerabilities 1,867
Exploit Likelihood High