1620
Observed Examples
Reference Description
CVE-2022-21668 Chain: Python library does not limit the resources used to process images
that specify a very large number of bands (CWE-1284), leading to excessive
memory consumption (CWE-789) or an integer overflow (CWE-190).
https://www.cve.org/CVERecord?id=CVE-2022-21668
CVE-2009-4017 Language interpreter does not restrict the number of temporary files being
created when handling a MIME request with a large number of parts..
https://www.cve.org/CVERecord?id=CVE-2009-4017
CVE-2009-2726 Driver does not use a maximum width when invoking sscanf style functions,
causing stack consumption.
https://www.cve.org/CVERecord?id=CVE-2009-2726
CVE-2009-2540 Large integer value for a length property in an object causes a large amount of
memory allocation.
https://www.cve.org/CVERecord?id=CVE-2009-2540
CVE-2009-2054 Product allows exhaustion of file descriptors when processing a large number
of TCP packets.
https://www.cve.org/CVERecord?id=CVE-2009-2054
CVE-2008-5180 Communication product allows memory consumption with a large number of
SIP requests, which cause many sessions to be created.
https://www.cve.org/CVERecord?id=CVE-2008-5180
CVE-2008-1700 Product allows attackers to cause a denial of service via a large number of
directives, each of which opens a separate window.
https://www.cve.org/CVERecord?id=CVE-2008-1700
CVE-2005-4650 CMS does not restrict the number of searches that can occur simultaneously,
leading to resource exhaustion.
https://www.cve.org/CVERecord?id=CVE-2005-4650
CVE-2020-15100 web application scanner attempts to read an excessively large file created by a
user, causing process termination
https://www.cve.org/CVERecord?id=CVE-2020-15100
CVE-2020-7218 Go-based workload orchestrator does not limit resource usage with
unauthenticated connections, allowing a DoS by flooding the service
https://www.cve.org/CVERecord?id=CVE-2020-7218
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 802 2010 Top 25 - Risky Resource Management 800 2354
MemberOf 857 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 14 - Input Output (FIO)
844 2368
MemberOf 858 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 15 - Serialization (SER)
844 2368
MemberOf 861 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 18 - Miscellaneous (MSC)
844 2370
MemberOf 867 2011 Top 25 - Weaknesses On the Cusp 900 2372
MemberOf 876 CERT C++ Secure Coding Section 08 - Memory
Management (MEM)
868 2376
MemberOf 877 CERT C++ Secure Coding Section 09 - Input Output
(FIO)
868 2377
MemberOf 884 CWE Cross-section 884 2567
MemberOf 985 SFP Secondary Cluster: Unrestricted Consumption 888 2411
CWE Version 4.14
CWE-770: Allocation of Resources Without Limits or Throttling
CWE-770: Allocation of Resources Without Limits or Throttling