994
Reference Description
CVE-2021-32617 C++ library for image metadata has "quadratic complexity" issue with
unnecessarily repetitive parsing each time an invalid character is encountered
https://www.cve.org/CVERecord?id=CVE-2021-32617
CVE-2020-10735 Python has "quadratic complexity" issue when converting string to int with
many digits in unexpected bases
https://www.cve.org/CVERecord?id=CVE-2020-10735
CVE-2020-5243 server allows ReDOS with crafted User-Agent strings, due to overlapping
capture groups that cause excessive backtracking.
https://www.cve.org/CVERecord?id=CVE-2020-5243
CVE-2014-1474 Perl-based email address parser has "quadratic complexity" issue via a string
that does not contain a valid address
https://www.cve.org/CVERecord?id=CVE-2014-1474
CVE-2003-0244 CPU consumption via inputs that cause many hash table collisions.
https://www.cve.org/CVERecord?id=CVE-2003-0244
CVE-2003-0364 CPU consumption via inputs that cause many hash table collisions.
https://www.cve.org/CVERecord?id=CVE-2003-0364
CVE-2002-1203 Product performs unnecessary processing before dropping an invalid packet.
https://www.cve.org/CVERecord?id=CVE-2002-1203
CVE-2001-1501 CPU and memory consumption using many wildcards.
https://www.cve.org/CVERecord?id=CVE-2001-1501
CVE-2004-2527 Product allows attackers to cause multiple copies of a program to be loaded
more quickly than the program can detect that other copies are running, then
exit. This type of error should probably have its own category, where teardown
takes more time than initialization.
https://www.cve.org/CVERecord?id=CVE-2004-2527
CVE-2006-6931 Network monitoring system allows remote attackers to cause a denial of
service (CPU consumption and detection outage) via crafted network traffic,
aka a "backtracking attack."
https://www.cve.org/CVERecord?id=CVE-2006-6931
CVE-2006-3380 Wiki allows remote attackers to cause a denial of service (CPU consumption)
by performing a diff between large, crafted pages that trigger the worst case
algorithmic complexity.
https://www.cve.org/CVERecord?id=CVE-2006-3380
CVE-2006-3379 Wiki allows remote attackers to cause a denial of service (CPU consumption)
by performing a diff between large, crafted pages that trigger the worst case
algorithmic complexity.
https://www.cve.org/CVERecord?id=CVE-2006-3379
CVE-2005-2506 OS allows attackers to cause a denial of service (CPU consumption) via
crafted Gregorian dates.
https://www.cve.org/CVERecord?id=CVE-2005-2506
CVE-2005-1792 Memory leak by performing actions faster than the software can clear them.
https://www.cve.org/CVERecord?id=CVE-2005-1792
Functional Areas
• Cryptography
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 884 CWE Cross-section 884 2567
MemberOf 977 SFP Secondary Cluster: Design 888 2407
CWE Version 4.14
CWE-408: Incorrect Behavior Order: Early Amplification
CWE-408: Incorrect Behavior Order: Early Amplification