CWE-770

High likelihood

Allocation of Resources Without Limits or Throttling

Parent: CWE-400 - Uncontrolled Resource Consumption

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

1,884 vulnerabilities with CWE-770
CVE-2019-14958 HIGH
JetBrains PyCharm < 2019.2 - Denial of Service via Uncontrolled Memory Allocation
CVSS 7.5
CVE-2019-12714 MEDIUM
Cisco IC3000 Industrial Compute Gateway Firmware < 1.1.1 - Authenticated Denial of Service via Web Management Interface
CVSS 6.5
CVE-2019-5031 HIGH
Foxit PDF Reader <9.4.1.16828 - Memory Corruption
CVSS 8.8
CVE-2019-17067 CRITICAL
PuTTY < 0.73 - Unauthenticated Port Forwarding Connection Hijacking
CVSS 9.8
CVE-2019-9291 HIGH
Android 10 - Remote Code Execution in Bluetooth via Improper Memory Allocation
CVSS 8.8
CVE-2019-16889 HIGH
Ubiquiti EdgeMAX Firmware < 2.0.3 - Denial of Service via Beaker Session ID Cookie
CVSS 7.5
CVE-2019-15736 HIGH
GitLab < 12.2.1 - Denial of Service via CI Pipeline Resource Exhaustion
CVSS 7.5
CVE-2019-15722 HIGH
GitLab 8.15.0-12.2.1 - Denial of Service via Markdown Mathematical Expression Parsing
CVSS 7.5
CVE-2019-11060 HIGH
ASUS HG100 Firmware < 1.05.12 - Unauthenticated Denial of Service via Slowloris HTTP Attack
CVSS 7.5
CVE-2019-15753 CRITICAL
OpenStack os-vif 1.15.0-1.15.1 and 1.16.0 - Unauthenticated Ethernet Flooding via Hardcoded MAC Aging Time
CVSS 9.1
CVE-2019-15544 HIGH
rust-protobuf < 1.7.5 and protobuf < 2.6.0 - Denial of Service via Vec::reserve Memory Exhaustion
CVSS 7.5
CVE-2019-4338 HIGH
IBM Security Guardium Big Data Intelligence 4.0 - Info Disclosure
CVSS 7.5
CVE-2019-11924 HIGH
Facebook Fizz 2019.01.28.00-2019.08.05.00 - Denial of Service via Empty Handshake Fragments
CVSS 7.5
CVE-2019-15225 HIGH
Envoy < 1.11.1 - Denial of Service via Long URI Path Header
CVSS 7.5
CVE-2019-9012 HIGH
CODESYS V3 Products < 3.5.14.20 - Denial of Service via Crafted Communication Request
CVSS 7.5
CVE-2019-9518 HIGH
SwiftNIO 1.0.0-1.3.9 - Denial of Service via HTTP/2 Empty Frame Flood
CVSS 7.5
CVE-2019-9517 HIGH
SwiftNIO 1.0.0-1.3.9 - Denial of Service via HTTP/2 Window Manipulation
CVSS 7.5
CVE-2019-9516 MEDIUM
SwiftNIO 1.0.0-1.3.9 - Denial of Service via HTTP/2 Header Leak
CVSS 6.5
CVE-2019-9515 HIGH
SwiftNIO 1.0.0-1.3.9 - Denial of Service via HTTP/2 Settings Flood
CVSS 7.5
CVE-2019-9514 HIGH
SwiftNIO 1.0.0-1.3.9 - Denial of Service via HTTP/2 Reset Flood
CVSS 7.5
CVE-2019-9511 HIGH
SwiftNIO 1.0.0-1.3.9 - Denial of Service via HTTP/2 Window Size Manipulation
CVSS 7.5
CVE-2019-10094 HIGH
Apache Tika 1.7-1.21 - Denial of Service via RecursiveParserWrapper
CVSS 7.8
CVE-2019-10093 MEDIUM
Apache Tika 1.19-1.21 - Denial of Service via Crafted 2003ml or 2006ml File
CVSS 6.5
CVE-2019-10088 HIGH
Apache Tika <1.22 - Memory Corruption
CVSS 8.8
CVE-2019-10171 HIGH
389 Directory Server 1.4.0.0-1.4.0.16 - Denial of Service via Excessive CPU Consumption
CVSS 7.5
Details
Vulnerabilities 1,884
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits