VYPR

CWE-400

Uncontrolled Resource Consumption

ClassDraftLikelihood: High

Description

The product does not properly control the allocation and maintenance of a limited resource.

Hierarchy (View 1000)

Related attack patterns (CAPEC)

CAPEC-147 · CAPEC-227 · CAPEC-492

CVEs mapped to this weakness (3,812)

page 31 of 191
  • CVE-2024-38236HigSep 10, 2024
    risk 0.49cvss 7.5epss 0.02

    DHCP Server Service Denial of Service Vulnerability

  • CVE-2024-43647HigSep 10, 2024
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All versions), SIMATIC S7-200 SMART CPU CR60 (6ES7288-1CR60-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR20…

  • CVE-2024-42981HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the delno parameter in the fromPptpUserSetting function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-42980HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-42969HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-42951HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the mit_pptpusrpw parameter in the fromWizardHandle function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-42950HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the Go parameter in the fromSafeClientFilter function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-42943HigAug 15, 2024
    risk 0.49cvss 7.5epss 0.01

    Tenda FH1201 v1.2.0.14 (408) was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

  • CVE-2024-41727HigAug 14, 2024
    risk 0.49cvss 7.5epss 0.00

    In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undisclosed traffic can cause an increase in memory resource utilization.   Note: Software versions which have reached End of Technical Support (EoTS)…

  • CVE-2024-38168HigAug 13, 2024
    risk 0.49cvss 7.5epss 0.03

    .NET and Visual Studio Denial of Service Vulnerability

  • CVE-2024-42481HigAug 12, 2024
    risk 0.49cvss 7.5epss 0.00

    Skyport Daemon (skyportd) is the daemon for the Skyport Panel. By making thousands of folders & files (easy due to skyport's lack of rate limiting on createFolder. createFile), skyportd in a lot of cases will cause 100% CPU usage and an OOM, probably crashing the system. This is…

  • CVE-2024-39551HigJul 11, 2024
    risk 0.49cvss 7.5epss 0.00

    An Uncontrolled Resource Consumption vulnerability in the H.323 ALG (Application Layer Gateway) of  Juniper Networks Junos OS on SRX Series and MX Series with SPC3 and MS-MPC/MIC, allows an unauthenticated network-based attacker to send specific packets causing traffic loss…

  • CVE-2024-39548HigJul 11, 2024
    risk 0.49cvss 7.5epss 0.00

    An Uncontrolled Resource Consumption vulnerability in the aftmand process of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to consume memory resources, resulting in a Denial of Service (DoS) condition. The processes do not recover on their…

  • CVE-2024-21526HigJul 10, 2024
    risk 0.49cvss 7.5epss 0.01

    All versions of the package speaker are vulnerable to Denial of Service (DoS) when providing unexpected input types to the channels property of the Speaker object makes it possible to reach an assert macro. Exploiting this vulnerability can lead to a process crash.

  • CVE-2024-21523HigJul 10, 2024
    risk 0.49cvss 7.5epss 0.01

    All versions of the package images are vulnerable to Denial of Service (DoS) due to providing unexpected input types to several different functions. This makes it possible to reach an assert macro, leading to a process crash. **Note:** By providing some specific integer values…

  • CVE-2024-21521HigJul 10, 2024
    risk 0.49cvss 7.5epss 0.01

    All versions of the package @discordjs/opus are vulnerable to Denial of Service (DoS) due to providing an input object with a property toString to several different functions. Exploiting this vulnerability could lead to a system crash.

  • CVE-2024-38068HigJul 9, 2024
    risk 0.49cvss 7.5epss 0.03

    Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

  • CVE-2024-38067HigJul 9, 2024
    risk 0.49cvss 7.5epss 0.03

    Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

  • CVE-2024-38031HigJul 9, 2024
    risk 0.49cvss 7.5epss 0.03

    Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

  • CVE-2024-38015HigJul 9, 2024
    risk 0.49cvss 7.5epss 0.02

    Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability