CWE-400 未加控制的资源消耗(资源穷尽) 类弱点 1799 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-400 指资源消耗不受控漏洞，属于资源管理缺陷。攻击者通常通过发送大量请求或构造复杂查询，耗尽服务器 CPU、内存或带宽，导致服务拒绝。开发者应避免此类问题，需实施严格的速率限制、请求大小校验及资源配额管理，并设置合理的超时机制与异常处理逻辑，确保有限资源在预期范围内被安全分配与维护。
class Worker implements Executor { ... public void execute(Runnable r) { try { ... } catch (InterruptedException ie) { // postpone response Thread.currentThread().interrupt(); } } public Worker(Channel ch, int nworkers) { ... } protected void activate() { Runnable loop = new Runnable() { public void run() { try { for (;;) { Runnable r = ...; r.run(); } } catch (InterruptedException ie) { ... } } }; new Thread(loop).start(); } }sock=socket(AF_INET, SOCK_STREAM, 0); while (1) { newsock=accept(sock, ...); printf("A connection has been accepted\n"); pid = fork(); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-43564 | Splunk 资源管理错误漏洞 — Splunk Enterprise | 4.9 | Medium | 2022-11-04 |
| CVE-2022-20960 | 多款Cisco产品信任管理问题漏洞 — Cisco Secure Email | 7.5 | High | 2022-11-03 |
| CVE-2022-2741 | Zephyr 资源管理错误漏洞 — zephyr | 8.2 | High | 2022-10-31 |
| CVE-2022-39294 | conduit-hyper 资源管理错误漏洞 — conduit-hyper | 7.5 | High | 2022-10-31 |
| CVE-2022-39330 | Nextcloud 资源管理错误漏洞 — security-advisories | 4.8 | Medium | 2022-10-27 |
| CVE-2022-41833 | F5 BIG-IP 资源管理错误漏洞 — BIG-IP | 7.5 | High | 2022-10-19 |
| CVE-2022-41806 | F5 BIG-IP 资源管理错误漏洞 — BIG-IP AFM | 7.5 | High | 2022-10-19 |
| CVE-2022-41770 | F5 BIG-IP 资源管理错误漏洞 — BIG-IP | 6.5 | Medium | 2022-10-19 |
| CVE-2020-15853 | supybot-fedora 安全漏洞 — supybot-fedora | - | - | 2022-10-18 |
| CVE-2022-3517 | minimatch 资源管理错误漏洞 — minimatch | 7.5 | - | 2022-10-17 |
| CVE-2022-38677 | UNISOC chipset 安全漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | 5.5 | - | 2022-10-14 |
| CVE-2022-38679 | UNISOC chipset 安全漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | 5.5 | - | 2022-10-14 |
| CVE-2022-38687 | UNISOC chipset 安全漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | 5.5 | - | 2022-10-14 |
| CVE-2022-39123 | UNISOC chipset 缓冲区错误漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | 5.5 | - | 2022-10-14 |
| CVE-2022-39124 | UNISOC chipset 缓冲区错误漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | 5.5 | - | 2022-10-14 |
| CVE-2022-39125 | UNISOC chipset 缓冲区错误漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | 5.5 | - | 2022-10-14 |
| CVE-2022-39126 | UNISOC chipset 缓冲区错误漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | 5.5 | - | 2022-10-14 |
| CVE-2022-39127 | UNISOC chipset 缓冲区错误漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | 5.5 | - | 2022-10-14 |
| CVE-2022-39128 | UNISOC chipset 缓冲区错误漏洞 — SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | 5.5 | - | 2022-10-14 |
| CVE-2022-39278 | Istio 资源管理错误漏洞 — istio | 7.5 | High | 2022-10-13 |
| CVE-2022-38371 | Siemens Nucleus NET和Nucleus ReadyStart 资源管理错误漏洞 — APOGEE MBC (PPC) (BACnet) | 7.5 | High | 2022-10-11 |
| CVE-2022-39271 | Containous Traefik 资源管理错误漏洞 — traefik | 7.5 | High | 2022-10-11 |
| CVE-2022-39280 | Dependency Parser 资源管理错误漏洞 — dparse | 5.9 | Medium | 2022-10-06 |
| CVE-2022-3257 | Mattermost 代码问题漏洞 — Mattermost | 3.1 | Low | 2022-09-23 |
| CVE-2022-23951 | Keylime 安全漏洞 — keylime | 8.1 | - | 2022-09-21 |
| CVE-2022-40150 | Jettison 资源管理错误漏洞 — Jettison | 6.5 | Medium | 2022-09-16 |
| CVE-2022-39209 | cmark-gfm 资源管理错误漏洞 — cmark-gfm | 7.5 | High | 2022-09-15 |
| CVE-2022-36114 | Cargo 资源管理错误漏洞 — cargo | 4.8 | Medium | 2022-09-14 |
| CVE-2022-2962 | QEMU 缓冲区错误漏洞 — QEMU | 8.8 | - | 2022-09-13 |
| CVE-2022-38100 | Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor 安全漏洞 — CMS8000 CONTEC ICU CCU Vital Signs Patient Monitor | 7.5 | High | 2022-09-13 |
CWE-400（未加控制的资源消耗(资源穷尽)） 是常见的弱点类别，本平台收录该类弱点关联的 1799 条 CVE 漏洞。