971
Reference Description
CVE-2008-2121 TCP implementation allows attackers to consume CPU and prevent new
connections using a TCP SYN flood attack.
https://www.cve.org/CVERecord?id=CVE-2008-2121
CVE-2008-2122 Port scan triggers CPU consumption with processes that attempt to read data
from closed sockets.
https://www.cve.org/CVERecord?id=CVE-2008-2122
CVE-2008-1700 Product allows attackers to cause a denial of service via a large number of
directives, each of which opens a separate window.
https://www.cve.org/CVERecord?id=CVE-2008-1700
CVE-2007-4103 Product allows resource exhaustion via a large number of calls that do not
complete a 3-way handshake.
https://www.cve.org/CVERecord?id=CVE-2007-4103
CVE-2006-1173 Mail server does not properly handle deeply nested multipart MIME messages,
leading to stack exhaustion.
https://www.cve.org/CVERecord?id=CVE-2006-1173
CVE-2007-0897 Chain: anti-virus product encounters a malformed file but returns from a
function without closing a file descriptor (CWE-775) leading to file descriptor
consumption (CWE-400) and failed scans.
https://www.cve.org/CVERecord?id=CVE-2007-0897
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 730 OWASP Top Ten 2004 Category A9 - Denial of Service 711 2339
MemberOf 858 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 15 - Serialization (SER)
844 2368
MemberOf 861 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 18 - Miscellaneous (MSC)
844 2370
MemberOf 884 CWE Cross-section 884 2567
MemberOf 985 SFP Secondary Cluster: Unrestricted Consumption 888 2411
MemberOf 1003 Weaknesses for Simplified Mapping of Published
Vulnerabilities
1003 2576
MemberOf 1148 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 14. Serialization (SER)
1133 2451
MemberOf 1152 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 49. Miscellaneous (MSC)
1133 2453
MemberOf 1200 Weaknesses in the 2019 CWE Top 25 Most Dangerous
Software Errors
1200 2587
MemberOf 1350 Weaknesses in the 2020 CWE Top 25 Most Dangerous
Software Weaknesses
1350 2594
MemberOf 1387 Weaknesses in the 2022 CWE Top 25 Most Dangerous
Software Weaknesses
1387 2597
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Notes
Maintenance
"Resource consumption" could be interpreted as a consequence instead of an insecure behavior,
so this entry is being considered for modification. It appears to be referenced too frequently when
CWE Version 4.14
CWE-400: Uncontrolled Resource Consumption
CWE-400: Uncontrolled Resource Consumption