Vulnerabilities > Allocation of Resources Without Limits or Throttling

DATE CVE VULNERABILITY TITLE RISK
2022-08-31 CVE-2022-38153 Allocation of Resources Without Limits or Throttling vulnerability in Wolfssl 5.3.0
An issue was discovered in wolfSSL before 5.5.0 (when --enable-session-ticket is used); however, only version 5.3.0 is exploitable.
network
high complexity
wolfssl CWE-770
5.9
2022-08-29 CVE-2022-0480 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel.
local
low complexity
linux redhat CWE-770
5.5
2022-08-26 CVE-2021-3669 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
A flaw was found in the Linux kernel.
local
low complexity
linux ibm debian fedoraproject redhat CWE-770
5.5
2022-08-23 CVE-2021-3759 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores.
local
low complexity
linux debian CWE-770
5.5
2022-08-23 CVE-2022-25761 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
The package open62541/open62541 before 1.2.5, from 1.3-rc1 and before 1.3.1 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions.
network
low complexity
open62541 fedoraproject CWE-770
7.5
2022-08-16 CVE-2020-14322 Allocation of Resources Without Limits or Throttling vulnerability in Moodle
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it can load to help mitigate the risk of denial of service.
network
low complexity
moodle CWE-770
7.5
2022-08-10 CVE-2022-36324 Allocation of Resources Without Limits or Throttling vulnerability in Siemens products
Affected devices do not properly handle the renegotiation of SSL/TLS parameters.
network
low complexity
siemens CWE-770
7.5
2022-08-01 CVE-2022-35922 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
Rust-WebSocket is a WebSocket (RFC6455) library written in Rust.
7.5
2022-08-01 CVE-2022-35915 Allocation of Resources Without Limits or Throttling vulnerability in Openzeppelin products
OpenZeppelin Contracts is a library for secure smart contract development.
network
low complexity
openzeppelin CWE-770
5.3
2022-07-17 CVE-2022-29286 Allocation of Resources Without Limits or Throttling vulnerability in Pexip Infinity
Pexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption and termination because of registrar resource mishandling.
network
low complexity
pexip CWE-770
5.0