998
Reference Description
CVE-2009-1955 XML bomb in web server module
https://www.cve.org/CVERecord?id=CVE-2009-1955
CVE-2003-1564 Parsing library allows XML bomb
https://www.cve.org/CVERecord?id=CVE-2003-1564
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 845 The CERT Oracle Secure Coding Standard for
Java (2011) Chapter 2 - Input Validation and Data
Sanitization (IDS)
844 2362
MemberOf 884 CWE Cross-section 884 2567
MemberOf 977 SFP Secondary Cluster: Design 888 2407
MemberOf 1134 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 00. Input Validation and Data Sanitization
(IDS)
1133 2444
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Data Amplification
The CERT Oracle Secure
Coding Standard for Java
(2011)
IDS04-J Limit the size of files passed to
ZipInputStream
CWE-410: Insufficient Resource Pool
Weakness ID : 410
Structure : Simple
Abstraction : Base
Description
The product's resource pool is not large enough to handle peak demand, which allows an attacker
to prevent others from accessing the resource by using a (relatively) large number of requests for
resources.
Extended Description
Frequently the consequence is a "flood" of connection or sessions.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 664 Improper Control of a Resource Through its Lifetime 1454
CanPrecede 400 Uncontrolled Resource Consumption 964
CWE Version 4.14
CWE-410: Insufficient Resource Pool
CWE-410: Insufficient Resource Pool