Fallos del tipo CWE-400

3051 resultados

Consumo descontrolado de recursos (esgotamento)

A aplicação não limita adequadamente o consumo de recursos (memória, CPU, conexões, disco) em resposta a requisições do usuário ou eventos externos. Um atacante explora isso enviando muitas requisições ou dados grandes para derrubar o serviço, indisponibilizando-o para usuários legítimos.

Ejemplo

Um endpoint de upload aceita arquivos sem limitar o tamanho ou taxa de envio; um atacante manda gigabytes contínuos até a aplicação ficar sem espaço em disco ou memória. Ou um loop sem condição de parada processa dados de entrada indefinidamente, travando a CPU.

Cómo mitigar

Implemente limites explícitos: tamanho máximo de arquivo/requisição, rate limiting (requisições por IP/usuário), timeouts, pool de conexões com tamanho fixo, e monitoramento de recursos. Valide e rejeite early entradas que excedem esses limites.

CVE-2025-30725MEDIUMVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.EPSS 0.2%CVE-2024-31209MEDIUMOpenID Connect client Atom Exhaustion in provider configuration worker ets table locationEPSS 0.2%CVE-2024-22104MEDIUMOut-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error and Denial ofEPSS 0.2%CVE-2024-31145HIGHerror handling in x86 IOMMU identity mappingEPSS 0.2%CVE-2026-82001MEDIUMAcrobat Reader | Uncontrolled Resource Consumption (CWE-400)EPSS 0.2%CVE-2024-8939MEDIUMVllm: denials of service in vllm json web apiEPSS 0.2%CVE-2022-46351MEDIUMA vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALAEPSS 0.2%CVE-2025-24151MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3.EPSS 0.2%CVE-2025-43295MEDIUMA denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, macOS Sequoia 15.7, macOSEPSS 0.2%CVE-2021-0238MEDIUMJunos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk spaceEPSS 0.2%CVE-2026-10668LOWHost-triggerable control-endpoint wedge (DoS) in Nuvoton NuMaker HSUSBD UDC driverEPSS 0.2%CVE-2025-6274MEDIUMWebAssembly wabt binary-reader-interp.cc OnDataCount resource consumptionEPSS 0.2%CVE-2024-57782MEDIUMAn issue in Docker-proxy v18.09.0 allows attackers to cause a denial of service.EPSS 0.2%CVE-2024-35799MEDIUMdrm/amd/display: Prevent crash when disable streamEPSS 0.2%CVE-2025-58436MEDIUMOpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attackEPSS 0.2%CVE-2026-16543HIGHKong Operator cluster-wide ingress configuration DoS via embedded KIC CA-certificate ID collisionEPSS 0.2%CVE-2025-6817MEDIUMHDF5 H5Centry.c H5C__load_entry resource consumptionEPSS 0.2%CVE-2022-28657HIGHApport does not disable python crash handler before entering chrootEPSS 0.2%CVE-2026-15228HIGHKong Kubernetes Ingress Controller cluster-wide ingress configuration DoS via CA-certificate ID collisionEPSS 0.2%CVE-2024-0115MEDIUMNVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may cause an uncontrolled reEPSS 0.2%