Weaknesses of type CWE-770

2,203 results

Alocação irrestrita de recursos

É quando a aplicação aloca recursos (memória, conexões, arquivos, threads) em nome do usuário sem limites, permitindo que um atacante esgote os recursos disponíveis do servidor. O código não valida quantidade nem tamanho, criando uma porta aberta para negação de serviço.

Example

Um endpoint HTTP que processa uploads sem validar tamanho máximo: um atacante envia múltiplos arquivos gigantes ou faz requisições em loop, consumindo toda a memória/disco até o servidor ficar indisponível para usuários legítimos.

How to mitigate

Implemente cotas e limites: defina tamanho máximo de upload, máximo de conexões por cliente, timeout para operações, e use rate limiting. Monitore consumo de recursos e rejeite requisições que violem as políticas de limite.

CVE-2026-114644HIGHMemory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deserializationEPSS 0.5%CVE-2024-7734MEDIUMPhoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.EPSS 0.5%CVE-2021-47713HIGHHasura GraphQL 1.3.3 Denial of Service via Malicious GraphQL QueryEPSS 0.5%CVE-2025-32777HIGHVolcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender PluginEPSS 0.5%CVE-2026-32062HIGHOpenClaw 2026.2.21-2 < 2026.2.22 - Unauthenticated WebSocket Resource Exhaustion via Media StreamEPSS 0.5%CVE-2026-31866HIGHAllocation of Resources Without Limits or Throttling in flagdEPSS 0.5%CVE-2026-56150MEDIUMAllocation of Resources Without Limits or Throttling in Fleet Server Leading to Denial of ServiceEPSS 0.5%CVE-2026-91987HIGHatomic-agents-stack before 1.1.0 Cost Guardrail Bypass via Unknown ModelEPSS 0.5%CVE-2026-55733MEDIUMAtom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creationEPSS 0.5%CVE-2026-55734MEDIUMguardian atom exhaustion in Guardian.Permissions.encode_permissions!/1EPSS 0.5%CVE-2019-25342HIGHCentova Cast 3.2.12 - Denial of ServiceEPSS 0.5%CVE-2026-54894MEDIUMAtom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keysEPSS 0.5%CVE-2025-8099HIGHAllocation of Resources Without Limits or Throttling in GitLabEPSS 0.5%CVE-2024-57722HIGHlunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.EPSS 0.5%CVE-2026-74786HIGHScriban before 7.0.0 Denial of Service via Unbounded Template OutputEPSS 0.5%CVE-2026-115721HIGHApache Vysper: Unbounded allocationEPSS 0.5%CVE-2026-116134HIGHHTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header blockEPSS 0.5%CVE-2022-48357—Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of service (DoS) attacks tEPSS 0.5%CVE-2023-30443MEDIUMIBM Db2 denial of serviceEPSS 0.5%CVE-2026-78586MEDIUMAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceEPSS 0.5%