CWE-770

High likelihood

Allocation of Resources Without Limits or Throttling

Parent: CWE-400 - Uncontrolled Resource Consumption

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

1,884 vulnerabilities with CWE-770
CVE-2019-14941 HIGH
SHAREit < 4.0.6.177 - Denial of Service via Uncontrolled Memory Allocation
CVSS 7.5
CVE-2019-11939 HIGH
Facebook Thrift <2020.03.16.00 - DoS
CVSS 7.5
CVE-2019-3553 HIGH
Facebook Thrift < 2020.02.03.00 - Denial of Service via Oversized Container Declaration
CVSS 7.5
CVE-2019-11938 HIGH
Facebook Thrift <2019.12.09.00 - DoS
CVSS 7.5
CVE-2019-4720 HIGH
IBM WebSphere Application Server <9.0 - DoS
CVSS 7.5
CVE-2019-14834 LOW
dnsmasq < 2.81 - Denial of Service via DHCP Response Memory Leak
CVSS 3.7
CVE-2019-20019 MEDIUM
matio 1.5.17 - Denial of Service via Excessive Memory Allocation in Mat_VarRead5
CVSS 6.5
CVE-2019-20015 MEDIUM
GNU LibreDWG 0.92 - Denial of Service via Excessive Memory Allocation in LWPOLYLINE Decoding
CVSS 6.5
CVE-2019-20013 MEDIUM
GNU LibreDWG < 0.9.3 - Denial of Service via Excessive Memory Allocation in decode_3dsolid
CVSS 6.5
CVE-2019-20012 MEDIUM
GNU LibreDWG 0.92 - Denial of Service via Excessive Memory Allocation in HATCH Private Data Decoding
CVSS 6.5
CVE-2019-20009 MEDIUM
GNU LibreDWG < 0.9.3 - Denial of Service via Excessive Memory Allocation in dwg_decode_SPLINE_private
CVSS 6.5
CVE-2019-19958 MEDIUM
libiec61850 1.4.0 - Denial of Service via Integer Signedness Issue in StringUtils_createStringFromBuffer
CVSS 6.5
CVE-2019-16770 MEDIUM
Puma 3.0.0-3.12.1 - Denial of Service via Keepalive Connection Monopolization
CVSS 5.3
CVE-2019-11923 HIGH
facebook/mcrouter < 0.41.0 - Denial of Service via ASCII Parser Buffer Allocation
CVSS 7.5
CVE-2019-15593 MEDIUM
GitLab 12.2.3 - Denial of Service via Issue Comments
CVSS 6.5
CVE-2019-12406 MEDIUM
Apache CXF < 3.2.11 - Denial of Service via Unrestricted Message Attachments
CVSS 6.5
CVE-2019-6120 HIGH
NiceHash Miner < 2.0.3.0 - Unauthenticated Email Enumeration via Wallet Addition Rate Limit Bypass
CVSS 7.5
CVE-2019-5043 HIGH
Nest Cam IQ Indoor Firmware 4620002 - Denial of Service via Weave Daemon TCP Connection Exhaustion
CVSS 7.5
CVE-2019-10079 HIGH
Apache Traffic Server <7.1.7-8.0.4 - DoS
CVSS 7.5
CVE-2019-12611 MEDIUM
Bitdefender BOX Firmware < 2.1.37.37-34 - Denial of Service via miniupnpd Memory Allocation
CVSS 4.4
CVE-2019-17583 HIGH
idreamsoft iCMS 7.0.15 - Denial of Service via Comment Query Resource Consumption
CVSS 7.5
CVE-2019-17359 HIGH
Bouncycastle Bc-java < 3.0.2.1 - Resource Allocation Without Limits
CVSS 7.5
CVE-2019-17351 MEDIUM
Xen < 4.12.1 and Linux Kernel < 5.2.3 - Denial of Service via Unrestricted Guest Memory Mapping
CVSS 6.5
CVE-2019-16865 HIGH
Pillow < 6.2.0 - Denial of Service via Crafted Invalid Image Files
CVSS 7.5
CVE-2019-15165 MEDIUM
libpcap < 1.9.1 - Denial of Service via Invalid PHB Header Length
CVSS 5.3
Details
Vulnerabilities 1,884
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits