CWE-400 未加控制的资源消耗(资源穷尽) 类弱点 1799 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-400 指资源消耗不受控漏洞，属于资源管理缺陷。攻击者通常通过发送大量请求或构造复杂查询，耗尽服务器 CPU、内存或带宽，导致服务拒绝。开发者应避免此类问题，需实施严格的速率限制、请求大小校验及资源配额管理，并设置合理的超时机制与异常处理逻辑，确保有限资源在预期范围内被安全分配与维护。
class Worker implements Executor { ... public void execute(Runnable r) { try { ... } catch (InterruptedException ie) { // postpone response Thread.currentThread().interrupt(); } } public Worker(Channel ch, int nworkers) { ... } protected void activate() { Runnable loop = new Runnable() { public void run() { try { for (;;) { Runnable r = ...; r.run(); } } catch (InterruptedException ie) { ... } } }; new Thread(loop).start(); } }sock=socket(AF_INET, SOCK_STREAM, 0); while (1) { newsock=accept(sock, ...); printf("A connection has been accepted\n"); pid = fork(); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-26470 | XWiki Platform 缓冲区错误漏洞 — xwiki-platform | 5.7 | Medium | 2023-03-02 |
| CVE-2023-23689 | Dell PowerScale OneFS 资源管理错误漏洞 — PowerScale OneFS | 5.3 | Medium | 2023-02-28 |
| CVE-2023-26104 | lite-web-server 资源管理错误漏洞 — lite-web-server | 7.5 | High | 2023-02-25 |
| CVE-2023-25816 | Nextcloud 资源管理错误漏洞 — security-advisories | 4.3 | Medium | 2023-02-24 |
| CVE-2023-0662 | PHP 资源管理错误漏洞 — PHP | 7.5 | High | 2023-02-16 |
| CVE-2023-23625 | go-unixfs 资源管理错误漏洞 — go-unixfs | 5.9 | Medium | 2023-02-09 |
| CVE-2023-23631 | go-unixfsnode 资源管理错误漏洞 — go-unixfsnode | 5.9 | Medium | 2023-02-09 |
| CVE-2022-40513 | Qualcomm 芯片资源管理错误漏洞 — Snapdragon | 7.5 | High | 2023-02-09 |
| CVE-2023-22795 | actionpack 安全漏洞 — https://github.com/rails/rails | 7.5 | - | 2023-02-09 |
| CVE-2022-44566 | rubygem-activerecord 安全漏洞 — https://github.com/rails/rails | 7.5 | - | 2023-02-09 |
| CVE-2022-44570 | rubygem-rack 资源管理错误漏洞 — https://github.com/rack/rack | 7.5 | - | 2023-02-09 |
| CVE-2022-44571 | rubygem-rack 安全漏洞 — https://github.com/rack/rack | 7.5 | - | 2023-02-09 |
| CVE-2022-44572 | rubygem-rack 安全漏洞 — https://github.com/rack/rack | 7.5 | - | 2023-02-09 |
| CVE-2023-22792 | rubygem-actionpack 安全漏洞 — https://github.com/rails/rails | 7.5 | - | 2023-02-09 |
| CVE-2023-22796 | rubygem-activesupport 安全漏洞 — https://github.com/rails/rails | 7.5 | - | 2023-02-09 |
| CVE-2023-22799 | rubygem-globalid 安全漏洞 — https://github.com/rails/globalid | 7.5 | - | 2023-02-09 |
| CVE-2023-25151 | OpenTelemetry-Go Contrib 资源管理错误漏洞 — opentelemetry-go-contrib | 7.5 | High | 2023-02-08 |
| CVE-2023-24574 | Dell Enterprise SONiC OS 资源管理错误漏洞 — Enterprise SONiC OS | 7.5 | High | 2023-02-02 |
| CVE-2023-23552 | F5 BIG-IP 资源管理错误漏洞 — BIG-IP | 7.5 | High | 2023-02-01 |
| CVE-2023-22664 | F5 BIG-IP 资源管理错误漏洞 — BIG-IP | 7.5 | High | 2023-02-01 |
| CVE-2023-23616 | Discourse 资源管理错误漏洞 — discourse | 3.5 | Low | 2023-01-27 |
| CVE-2023-22486 | cmark-gfm 资源管理错误漏洞 — cmark-gfm | 3.5 | Low | 2023-01-24 |
| CVE-2021-28510 | Arista Networks EOS 资源管理错误漏洞 — EOS | 5.3 | Medium | 2023-01-24 |
| CVE-2022-27507 | 多款Citrix Systems产品资源管理错误漏洞 — Citrix Application Delivery Controller (Citrix ADC) and Citrix Gateway | 6.5 | - | 2023-01-24 |
| CVE-2022-27508 | 多款Citrix Systems产品资源管理错误漏洞 — Citrix Application Delivery Controller (Citrix ADC) and Citrix Gateway | 7.5 | - | 2023-01-24 |
| CVE-2023-22484 | cmark-gfm 资源管理错误漏洞 — cmark-gfm | 3.5 | Low | 2023-01-23 |
| CVE-2023-22483 | cmark-gfm 资源管理错误漏洞 — cmark-gfm | 3.5 | Low | 2023-01-23 |
| CVE-2022-4816 | Lenovo Safecenter 安全漏洞 — Safecenter | 6.2 | Medium | 2023-01-23 |
| CVE-2023-20047 | Cisco Webex 安全漏洞 — Cisco Webex Room Phone | 6.5 | Medium | 2023-01-19 |
| CVE-2022-41861 | SUSE Linux Enterprise Server 输入验证错误漏洞 — freeradius | 6.5 | - | 2023-01-17 |
CWE-400（未加控制的资源消耗(资源穷尽)） 是常见的弱点类别，本平台收录该类弱点关联的 1799 条 CVE 漏洞。