CWE-770

High likelihood

Allocation of Resources Without Limits or Throttling

Parent: CWE-400 - Uncontrolled Resource Consumption

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

1,890 vulnerabilities with CWE-770

CVE-2016-9578 HIGH

spice < 0.13.90 - Denial of Service via Crafted Protocol Messages

CVSS 7.5

CVE-2016-8576 MEDIUM

QEMU < 2.7.1 - Denial of Service via Unlimited xHCI TRB Processing

CVSS 6.0

CVE-2016-4074 HIGH

jq <1.6 - Denial of Service

CVSS 7.5

CVE-2014-125127 HIGH

flightphp/flight < 1.2 - Denial of Service via Eager Request Body Loading

CVSS 7.5

CVE-2011-0419

Apache Portable Runtime < 1.4.3 - Denial of Service via fnmatch *? Sequence Handling

CVE-2009-4017

PHP < 5.2.12 and 5.3.x < 5.3.1 - Denial of Service via Multipart Form Data Temporary File Exhaustion

CVE-2009-2054

Cisco Unified Communications Manager <5.1.3g-7.1.2a - DoS

CVE-2009-2726

Asterisk Open Source <1.2.34-1.6.1.4 - DoS

CVE-2009-2540

Opera < 9.64 - Denial of Service via Large Select Object Length Property

CVE-2008-5180 MEDIUM

Microsoft Office Communicator - Denial of Service via SIP INVITE Request Flood

CVSS 5.3

CVE-2008-2364

Apache HTTP Server 2.0.35-2.0.63 - Denial of Service via Unlimited Interim Responses

CVE-2008-1700

WorkSite Web < 8.2 - Denial of Service via SendNrlLink Directives

CVE-2005-4650 MEDIUM

Joomla! 1.03 - Denial of Service via Excessive Search Mambots

CVSS 5.3

CVE-2005-2970

Apache HTTP Server 2.0.36-2.0.54 - Denial of Service via Worker MPM Memory Leak

CVE-2001-1388

iptables < 1.2.4 - Incorrect Rate Limit Conversion

Details

Vulnerabilities 1,890

Exploit Likelihood High

Links