CWE-400 未加控制的资源消耗(资源穷尽) 类弱点 2080 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-400 指资源消耗不受控漏洞，属于资源管理缺陷。攻击者通常通过发送大量请求或构造复杂查询，耗尽服务器 CPU、内存或带宽，导致服务拒绝。开发者应避免此类问题，需实施严格的速率限制、请求大小校验及资源配额管理，并设置合理的超时机制与异常处理逻辑，确保有限资源在预期范围内被安全分配与维护。
class Worker implements Executor { ... public void execute(Runnable r) { try { ... } catch (InterruptedException ie) { // postpone response Thread.currentThread().interrupt(); } } public Worker(Channel ch, int nworkers) { ... } protected void activate() { Runnable loop = new Runnable() { public void run() { try { for (;;) { Runnable r = ...; r.run(); } } catch (InterruptedException ie) { ... } } }; new Thread(loop).start(); } }sock=socket(AF_INET, SOCK_STREAM, 0); while (1) { newsock=accept(sock, ...); printf("A connection has been accepted\n"); pid = fork(); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2020-8557 | Kubernetes 资源管理错误漏洞 — Kubernetes | 5.5 | Medium | 2020-07-23 |
| CVE-2020-3372 | Cisco SD-WAN vManage Software 资源管理错误漏洞 — Cisco SD-WAN vManage | 6.5 | Medium | 2020-07-16 |
| CVE-2020-15101 | freewvs 资源管理错误漏洞 — freewvs | 2.8 | Low | 2020-07-14 |
| CVE-2020-15100 | freewvs 资源管理错误漏洞 — freewvs | 2.8 | Low | 2020-07-14 |
| CVE-2020-7584 | SIMATIC S7-200 SMART SR CPU和ST CPU 资源管理错误漏洞 — SIMATIC S7-200 SMART CPU family | 7.5 | - | 2020-07-14 |
| CVE-2020-7587 | Siemens Opcenter 资源管理错误漏洞 — Opcenter Execution Discrete | 8.3 | - | 2020-07-14 |
| CVE-2020-8185 | Rails 资源管理错误漏洞 — https://github.com/rails/rails | 6.5 | - | 2020-07-02 |
| CVE-2020-7507 | Schneider Electric Easergy T300 资源管理错误漏洞 — Easergy T300 (Firmware version 1.5.2 and older) | 6.5 | - | 2020-06-16 |
| CVE-2020-11090 | Indy Node 资源管理错误漏洞 — Indy Node | 7.5 | High | 2020-06-11 |
| CVE-2020-3203 | Cisco Catalyst 9800 Series Wireless Controllers IOS XE Software 资源管理错误漏洞 — Cisco IOS XE Software 16.1.1 | 8.6 | - | 2020-06-03 |
| CVE-2019-11048 | PHP 输入验证错误漏洞 — PHP | 5.3 | Medium | 2020-05-20 |
| CVE-2020-3306 | Cisco Firepower Threat Defense和Adaptive Security Appliances Software 资源管理错误漏洞 — Cisco Adaptive Security Appliance (ASA) Software | 7.5 | - | 2020-05-06 |
| CVE-2020-3305 | Cisco Firepower Threat Defense和Adaptive Security Appliances Software 资源管理错误漏洞 — Cisco Adaptive Security Appliance (ASA) Software | 7.5 | - | 2020-05-06 |
| CVE-2020-3255 | Cisco Firepower Threat Defense 资源管理错误漏洞 — Cisco Firepower Threat Defense Software | 8.6 | - | 2020-05-06 |
| CVE-2020-3254 | Cisco Firepower Threat Defense和Adaptive Security Appliances Software 资源管理错误漏洞 — Cisco Adaptive Security Appliance (ASA) Software | 7.5 | - | 2020-05-06 |
| CVE-2020-3196 | Cisco Firepower Threat Defense和Adaptive Security Appliances Software 资源管理错误漏洞 — Cisco Adaptive Security Appliance (ASA) Software | 8.6 | - | 2020-05-06 |
| CVE-2020-3195 | Cisco Firepower Threat Defense和Adaptive Security Appliances Software 资源管理错误漏洞 — Cisco Adaptive Security Appliance (ASA) Software | 7.5 | - | 2020-05-06 |
| CVE-2020-3189 | Cisco Firepower Threat Defense 资源管理错误漏洞 — Cisco Firepower Threat Defense Software | 8.6 | - | 2020-05-06 |
| CVE-2020-1722 | Red Hat IPA 资源管理错误漏洞 — ipa | 5.3 | Medium | 2020-04-27 |
| CVE-2019-19301 | Siemens SCALANCE X-200IRT 资源管理错误漏洞 — SCALANCE X200-4P IRT | 7.5 | High | 2020-04-14 |
| CVE-2019-19300 | 多款Siemens产品 资源管理错误漏洞 — Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 | 7.5 | High | 2020-04-14 |
| CVE-2020-1625 | Juniper Networks Junos OS 资源管理错误漏洞 — Junos OS | 6.5 | Medium | 2020-04-08 |
| CVE-2020-5347 | Dell EMC Isilon OneFS 资源管理错误漏洞 — Isilon OneFS | 5.3 | Medium | 2020-04-03 |
| CVE-2019-18904 | rmt-server 资源管理错误漏洞 — SUSE Linux Enterprise High Performance Computing 15-ESPOS | 6.5 | Medium | 2020-04-03 |
| CVE-2020-8136 | fastify-multipart 资源管理错误漏洞 — fastify-multipart | 7.5 | - | 2020-03-20 |
| CVE-2019-18336 | 多款Siemens产品资源管理错误漏洞 — SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) | 7.5 | - | 2020-03-10 |
| CVE-2019-19281 | 多款Siemens产品资源管理错误漏洞 — SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) | 7.5 | - | 2020-03-10 |
| CVE-2020-6986 | Omron PLC CJ series 资源管理错误漏洞 — Omron PLC CJ Series | 7.5 | - | 2020-03-05 |
| CVE-2020-3190 | Cisco IOS XR 资源管理错误漏洞 — Cisco IOS XR Software | 8.6 | - | 2020-03-04 |
| CVE-2020-3181 | Cisco Email Security Appliance 资源管理错误漏洞 — Cisco Email Security Appliance (ESA) | 6.5 | - | 2020-03-04 |
CWE-400（未加控制的资源消耗(资源穷尽)） 是常见的弱点类别，本平台收录该类弱点关联的 2080 条 CVE 漏洞。