CWE-400 未加控制的资源消耗(资源穷尽) 类弱点 1799 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-400 指资源消耗不受控漏洞，属于资源管理缺陷。攻击者通常通过发送大量请求或构造复杂查询，耗尽服务器 CPU、内存或带宽，导致服务拒绝。开发者应避免此类问题，需实施严格的速率限制、请求大小校验及资源配额管理，并设置合理的超时机制与异常处理逻辑，确保有限资源在预期范围内被安全分配与维护。
class Worker implements Executor { ... public void execute(Runnable r) { try { ... } catch (InterruptedException ie) { // postpone response Thread.currentThread().interrupt(); } } public Worker(Channel ch, int nworkers) { ... } protected void activate() { Runnable loop = new Runnable() { public void run() { try { for (;;) { Runnable r = ...; r.run(); } } catch (InterruptedException ie) { ... } } }; new Thread(loop).start(); } }sock=socket(AF_INET, SOCK_STREAM, 0); while (1) { newsock=accept(sock, ...); printf("A connection has been accepted\n"); pid = fork(); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-2793 | Mattermost 资源管理错误漏洞 — Mattermost | 6.5 | Medium | 2023-06-16 |
| CVE-2022-33168 | IBM Security Directory Suite 资源管理错误漏洞 — Security Directory Suite VA | 7.5 | High | 2023-06-15 |
| CVE-2023-29331 | Microsoft .NET Core安全漏洞 — .NET 6.0 | 7.5 | High | 2023-06-14 |
| CVE-2023-32013 | Microsoft Windows Hyper-V 安全漏洞 — Windows 10 Version 1809 | 5.3 | Medium | 2023-06-13 |
| CVE-2023-2778 | Rockwell Automation FactoryTalk Transaction Manager 资源管理错误漏洞 — FactoryTalk Transaction Manager | 7.5 | High | 2023-06-13 |
| CVE-2023-35053 | JetBrains YouTrack 资源管理错误漏洞 — YouTrack | 7.5 | High | 2023-06-12 |
| CVE-2023-3163 | RuoYi SQL注入漏洞 — RuoYi | 3.5 | Low | 2023-06-08 |
| CVE-2023-34109 | zxcvbn-ts 资源管理错误漏洞 — zxcvbn | 6.5 | Medium | 2023-06-07 |
| CVE-2023-33958 | Notation 资源管理错误漏洞 — notation | 5.4 | Medium | 2023-06-06 |
| CVE-2023-33957 | Notation 资源管理错误漏洞 — notation | 2.6 | Low | 2023-06-06 |
| CVE-2023-34104 | fast-xml-parser 安全漏洞 — fast-xml-parser | 7.5 | High | 2023-06-06 |
| CVE-2022-33303 | Qualcomm Chipsets 资源管理错误漏洞 — Snapdragon | 5.5 | Medium | 2023-06-06 |
| CVE-2022-39374 | Matrix 资源管理错误漏洞 — synapse | 5.3 | - | 2023-05-26 |
| CVE-2023-20883 | Spring Framework 资源管理错误漏洞 — Spring Boot | 7.5 | - | 2023-05-26 |
| CVE-2023-20882 | Cloud Foundry 安全漏洞 — Cloud Foundry Routing release | 5.9 | - | 2023-05-26 |
| CVE-2023-1981 | Avahi 资源管理错误漏洞 — avahi | 6.5 | - | 2023-05-26 |
| CVE-2023-28320 | libcurl 资源管理错误漏洞 — https://github.com/curl/curl | 5.9 | - | 2023-05-26 |
| CVE-2023-32067 | c-ares 资源管理错误漏洞 — c-ares | 7.5 | High | 2023-05-25 |
| CVE-2023-2798 | HtmlUnit 缓冲区错误漏洞 | 7.5 | High | 2023-05-25 |
| CVE-2022-36326 | 多款Western Digital产品资源管理错误漏洞 — My Cloud Home and My Cloud Home Duo | 4.4 | Medium | 2023-05-18 |
| CVE-2023-26044 | ReactPHP HTTP 资源管理错误漏洞 — http | 5.3 | Medium | 2023-05-17 |
| CVE-2023-2295 | Libreswan 安全漏洞 — libreswan | 7.5 | - | 2023-05-17 |
| CVE-2023-31409 | SICK FTMg 资源管理错误漏洞 — SICK FTMG-ESD15AXX AIR FLOW SENSOR | 5.3 | Medium | 2023-05-15 |
| CVE-2023-23447 | SICK FTMg 资源管理错误漏洞 — SICK FTMG-ESD15AXX AIR FLOW SENSOR | 7.5 | High | 2023-05-15 |
| CVE-2023-28356 | Rocket.Chat 资源管理错误漏洞 — Rocket.Chat | 7.5 | - | 2023-05-11 |
| CVE-2022-36329 | Western Digital My Cloud Home 安全漏洞 — My Cloud Home and My Cloud Home Duo | 4.4 | Medium | 2023-05-10 |
| CVE-2023-25568 | IPFS Boxo 安全漏洞 — boxo | 8.2 | High | 2023-05-10 |
| CVE-2023-24594 | F5 BIG-IP 资源管理错误漏洞 — BIG-IP | 5.3 | Medium | 2023-05-03 |
| CVE-2023-30798 | Starlette 资源管理错误漏洞 — Starlette | 7.5 | High | 2023-04-21 |
| CVE-2023-0384 | M-Files 资源管理错误漏洞 — M-Files Server | 6.5 | Medium | 2023-04-20 |
CWE-400（未加控制的资源消耗(资源穷尽)） 是常见的弱点类别，本平台收录该类弱点关联的 1799 条 CVE 漏洞。