CWE-400 未加控制的资源消耗(资源穷尽) 类弱点 1799 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-400 指资源消耗不受控漏洞，属于资源管理缺陷。攻击者通常通过发送大量请求或构造复杂查询，耗尽服务器 CPU、内存或带宽，导致服务拒绝。开发者应避免此类问题，需实施严格的速率限制、请求大小校验及资源配额管理，并设置合理的超时机制与异常处理逻辑，确保有限资源在预期范围内被安全分配与维护。
class Worker implements Executor { ... public void execute(Runnable r) { try { ... } catch (InterruptedException ie) { // postpone response Thread.currentThread().interrupt(); } } public Worker(Channel ch, int nworkers) { ... } protected void activate() { Runnable loop = new Runnable() { public void run() { try { for (;;) { Runnable r = ...; r.run(); } } catch (InterruptedException ie) { ... } } }; new Thread(loop).start(); } }sock=socket(AF_INET, SOCK_STREAM, 0); while (1) { newsock=accept(sock, ...); printf("A connection has been accepted\n"); pid = fork(); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-37480 | Fides 资源管理错误漏洞 — fides | 2.7 | Low | 2023-07-18 |
| CVE-2023-37481 | Fides 资源管理错误漏洞 — fides | 2.7 | Low | 2023-07-18 |
| CVE-2023-2263 | Rockwell Automation Kinetix 5700 资源管理错误漏洞 — Kinetix 5700 DC Bus Power Supply Series A | 7.5 | High | 2023-07-18 |
| CVE-2023-37475 | Hamba avro 资源管理错误漏洞 — avro | 7.5 | High | 2023-07-17 |
| CVE-2023-3593 | Mattermost 安全漏洞 — Mattermost | 4.3 | Medium | 2023-07-17 |
| CVE-2023-3614 | Mattermost 资源管理错误漏洞 — Mattermost | 4.3 | Medium | 2023-07-17 |
| CVE-2023-3585 | Mattermost 资源管理错误漏洞 — Mattermost | 4.3 | Medium | 2023-07-17 |
| CVE-2022-4952 | OmniSharp csharp-language-server-protocol 资源管理错误漏洞 — csharp-language-server-protocol | 3.5 | Low | 2023-07-17 |
| CVE-2023-36818 | Discourse 资源管理错误漏洞 — discourse | 6.5 | Medium | 2023-07-14 |
| CVE-2023-35945 | Envoy 资源管理错误漏洞 — envoy | 7.5 | High | 2023-07-13 |
| CVE-2023-37463 | cmark-gfm 资源管理错误漏洞 — cmark-gfm | 6.4 | Medium | 2023-07-13 |
| CVE-2023-34458 | mx-chain-go 资源管理错误漏洞 — mx-chain-go | 7.1 | High | 2023-07-13 |
| CVE-2023-26597 | Honeywell Products 缓冲区错误漏洞 — C300 | 7.5 | High | 2023-07-13 |
| CVE-2023-29449 | Zabbix 安全漏洞 — Zabbix | 5.9 | Medium | 2023-07-13 |
| CVE-2023-35298 | Microsoft HTTP.sys 安全漏洞 — Windows Server 2022 | 7.5 | High | 2023-07-11 |
| CVE-2023-35339 | Microsoft Windows CryptoAPI 安全漏洞 — Windows 10 Version 1809 | 7.5 | High | 2023-07-11 |
| CVE-2023-35329 | Microsoft Windows Authentication Methods 安全漏洞 — Windows 10 Version 1809 | 6.5 | Medium | 2023-07-11 |
| CVE-2023-35921 | Siemens SIMATIC 安全漏洞 — SIMATIC MV540 H | 7.5 | High | 2023-07-11 |
| CVE-2023-35920 | Siemens SIMATIC 多款产品 安全漏洞 — SIMATIC MV540 H | 7.5 | High | 2023-07-11 |
| CVE-2023-1206 | Linux kernel 资源管理错误漏洞 — Kernel | 5.7 | - | 2023-06-30 |
| CVE-2023-3398 | drawio 资源管理错误漏洞 — jgraph/drawio | 6.5 | - | 2023-06-26 |
| CVE-2023-35925 | FastAsyncWorldEdit 资源管理错误漏洞 — FastAsyncWorldEdit | 6.2 | Medium | 2023-06-23 |
| CVE-2023-33141 | Microsoft ASP.NET Core 安全漏洞 — YARP 1.0 | 7.5 | High | 2023-06-23 |
| CVE-2023-34462 | Netty 资源管理错误漏洞 — netty | 6.5 | Medium | 2023-06-22 |
| CVE-2023-2990 | Globalscape Enhanced File Transfer 安全漏洞 — Globalscape EFT | 7.5 | - | 2023-06-22 |
| CVE-2023-26434 | Open-Xchange App Suite 安全漏洞 — OX App Suite | 4.3 | Medium | 2023-06-20 |
| CVE-2023-26433 | Open-Xchange OX App Suite 安全漏洞 — OX App Suite | 4.3 | Medium | 2023-06-20 |
| CVE-2023-26432 | Open-Xchange OX App Suite 安全漏洞 — OX App Suite | 4.3 | Medium | 2023-06-20 |
| CVE-2023-2785 | Mattermost 资源管理错误漏洞 — Mattermost | 4.3 | Medium | 2023-06-16 |
| CVE-2023-2831 | Mattermost 资源管理错误漏洞 — Mattermost | 4.3 | Medium | 2023-06-16 |
CWE-400（未加控制的资源消耗(资源穷尽)） 是常见的弱点类别，本平台收录该类弱点关联的 1799 条 CVE 漏洞。