CWE-400 未加控制的资源消耗(资源穷尽) 类弱点 1799 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-400 指资源消耗不受控漏洞，属于资源管理缺陷。攻击者通常通过发送大量请求或构造复杂查询，耗尽服务器 CPU、内存或带宽，导致服务拒绝。开发者应避免此类问题，需实施严格的速率限制、请求大小校验及资源配额管理，并设置合理的超时机制与异常处理逻辑，确保有限资源在预期范围内被安全分配与维护。
class Worker implements Executor { ... public void execute(Runnable r) { try { ... } catch (InterruptedException ie) { // postpone response Thread.currentThread().interrupt(); } } public Worker(Channel ch, int nworkers) { ... } protected void activate() { Runnable loop = new Runnable() { public void run() { try { for (;;) { Runnable r = ...; r.run(); } } catch (InterruptedException ie) { ... } } }; new Thread(loop).start(); } }sock=socket(AF_INET, SOCK_STREAM, 0); while (1) { newsock=accept(sock, ...); printf("A connection has been accepted\n"); pid = fork(); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-47633 | Containous Traefik 资源管理错误漏洞 — traefik | 7.5 | High | 2023-12-04 |
| CVE-2023-40692 | IBM Db2 资源管理错误漏洞 — Db2 for Linux, UNIX and Windows | 5.9 | Medium | 2023-12-03 |
| CVE-2023-5915 | Yokogawa Electric 安全漏洞 — STARDOM | 7.5 | - | 2023-12-01 |
| CVE-2023-48713 | Knative Serving 安全漏洞 — serving | 6.5 | Medium | 2023-11-28 |
| CVE-2023-48369 | Mattermost 资源管理错误漏洞 — Mattermost | 4.3 | Medium | 2023-11-27 |
| CVE-2023-40703 | Mattermost 资源管理错误漏洞 — Mattermost | 4.3 | Medium | 2023-11-27 |
| CVE-2023-48268 | Mattermost 资源管理错误漏洞 — Mattermost | 4.3 | Medium | 2023-11-27 |
| CVE-2023-6277 | LibTIFF 安全漏洞 — Red Hat Enterprise Linux 6 | 6.5 | Medium | 2023-11-24 |
| CVE-2023-36038 | Microsoft ASP.NET Core 安全漏洞 — ASP.NET Core 8.0 | 8.2 | High | 2023-11-14 |
| CVE-2023-44321 | Siemens SCALANCE 多款产品安全漏洞 — RUGGEDCOM RM1224 LTE(4G) EU | 2.7 | Low | 2023-11-14 |
| CVE-2023-42813 | Kyverno 安全漏洞 — kyverno | 6.1 | Medium | 2023-11-13 |
| CVE-2023-5759 | Perforce Software Perforce Helix 资源管理错误漏洞 — Helix Core | 7.5 | High | 2023-11-08 |
| CVE-2023-45319 | Perforce Software Perforce Helix 资源管理错误漏洞 — Helix Core | 7.5 | High | 2023-11-08 |
| CVE-2023-35767 | Perforce Software Perforce Helix 资源管理错误漏洞 — Helix Core | 7.5 | High | 2023-11-08 |
| CVE-2023-46737 | Cosign 资源管理错误漏洞 — cosign | 3.1 | Low | 2023-11-07 |
| CVE-2023-5969 | Mattermost 资源管理错误漏洞 — Mattermost | 5.3 | Medium | 2023-11-06 |
| CVE-2023-41378 | Tigera Calico 安全漏洞 — Typha | 7.5 | High | 2023-11-06 |
| CVE-2023-42669 | Samba 安全漏洞 | 6.5 | Medium | 2023-11-06 |
| CVE-2023-42670 | Samba 安全漏洞 | 6.5 | Medium | 2023-11-03 |
| CVE-2023-29046 | Open-Xchange App Suite 资源管理错误漏洞 — OX App Suite | 4.3 | Medium | 2023-11-02 |
| CVE-2023-5876 | Mattermost 安全漏洞 — Mattermost Desktop | 3.1 | Low | 2023-11-02 |
| CVE-2023-31418 | Elasticsearch 资源管理错误漏洞 — Elasticsearch | 7.5 | High | 2023-10-26 |
| CVE-2023-39219 | Ping Identity PingFederate 资源管理错误漏洞 — PingFederate | 7.5 | High | 2023-10-25 |
| CVE-2023-46118 | RabbitMQ 资源管理错误漏洞 — rabbitmq-server | 4.9 | Medium | 2023-10-24 |
| CVE-2023-46120 | RabbitMQ 资源管理错误漏洞 — rabbitmq-java-client | 4.9 | Medium | 2023-10-24 |
| CVE-2022-3698 | Lenovo Diagnostics 资源管理错误漏洞 — HardwareScanPlugin | 4.4 | Medium | 2023-10-24 |
| CVE-2022-0353 | Lenovo Vantage 资源管理错误漏洞 — HardwareScanPlugin | 4.4 | Medium | 2023-10-24 |
| CVE-2023-42031 | IBM TXSeries for Multiplatforms 资源管理错误漏洞 — TXSeries for Multiplatforms | 4.9 | Medium | 2023-10-24 |
| CVE-2023-43622 | Apache HTTP Server 资源管理错误漏洞 — Apache HTTP Server | 7.5 | - | 2023-10-23 |
| CVE-2023-45810 | OpenFGA 资源管理错误漏洞 — openfga | 5.3 | Medium | 2023-10-17 |
CWE-400（未加控制的资源消耗(资源穷尽)） 是常见的弱点类别，本平台收录该类弱点关联的 1799 条 CVE 漏洞。