1614
Weakness ID : 770
Structure : Simple
Abstraction : Base
Description
The product allocates a reusable resource or group of resources on behalf of an actor without
imposing any restrictions on the size or number of resources that can be allocated, in violation of
the intended security policy for that actor.
Extended Description
Code frequently has to work with limited resources, so programmers must be careful to ensure
that resources are not consumed too quickly, or too easily. Without use of quotas, resource limits,
or other protection mechanisms, it can be easy for an attacker to consume many resources by
rapidly making many requests, or causing larger resources to be used than is needed. When too
many resources are allocated, or if a single resource is too large, then it can prevent the code from
working correctly, possibly leading to a denial of service.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 665 Improper Initialization 1456
ChildOf 400 Uncontrolled Resource Consumption 964
ParentOf 774 Allocation of File Descriptors or Handles Without Limits or
Throttling