CWE-770 不加限制或调节的资源分配 类弱点 1491 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-770 属于资源管理缺陷，指系统在分配可复用资源时未实施限制或节流措施。攻击者通常通过发送大量请求耗尽系统资源，导致拒绝服务或性能瘫痪。开发者应通过设置并发上限、实施速率限制及监控资源使用率来缓解风险，确保关键资源分配受到严格管控，防止恶意滥用。
sock=socket(AF_INET, SOCK_STREAM, 0); while (1) { newsock=accept(sock, ...); printf("A connection has been accepted\n"); pid = fork(); }int writeDataFromSocketToFile(char *host, int port) { char filename[FILENAME_SIZE]; char buffer[BUFFER_SIZE]; int socket = openSocketConnection(host, port); if (socket < 0) { printf("Unable to open socket connection"); return(FAIL); } if (getNextMessage(socket, filename, FILENAME_SIZE) > 0) { if (openFileToWrite(filename) > 0) { while (getNextMessage(socket, buffer, BUFFER_SIZE) > 0){ if (!(writeToFile(buffer) > 0)) break; } } closeFile(); } closeSocket(socket); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-36462 | Zabbix 安全漏洞 — Zabbix | 7.5 | High | 2024-08-09 |
| CVE-2024-39944 | Dahua NVR 安全漏洞 — IPC-HX8XXX and NVR4XXX | 7.5 | High | 2024-07-31 |
| CVE-2024-6504 | Rapid7 InsightVM 安全漏洞 — InsightVM | 4.3 | Medium | 2024-07-18 |
| CVE-2024-38535 | Suricata 安全漏洞 — suricata | 7.5 | High | 2024-07-11 |
| CVE-2024-38534 | Suricata 安全漏洞 — suricata | 7.5 | High | 2024-07-11 |
| CVE-2024-6037 | ChuanhuChatGPT 资源管理错误漏洞 — gaizhenbiao/chuanhuchatgpt | 9.1AI | Critical AI | 2024-07-10 |
| CVE-2024-6598 | KNIME Business Hub 安全漏洞 — KNIME Business Hub | 4.9AI | Medium AI | 2024-07-09 |
| CVE-2024-39876 | Siemens SINEMA Remote Connect Server 安全漏洞 — SINEMA Remote Connect Server | 4.0 | Medium | 2024-07-09 |
| CVE-2024-37298 | schema 安全漏洞 — schema | 7.5 | High | 2024-07-01 |
| CVE-2024-38528 | ntpd-rs 安全漏洞 — ntpd-rs | 7.5 | High | 2024-06-28 |
| CVE-2024-31919 | IBM MQ 安全漏洞 — MQ | 5.9 | Medium | 2024-06-28 |
| CVE-2024-6176 | LG SuperSign CMS 安全漏洞 — LG SuperSign CMS | - | - AI | 2024-06-20 |
| CVE-2024-5208 | AnythingLLM 安全漏洞 — mintplex-labs/anything-llm | 6.5AI | Medium AI | 2024-06-19 |
| CVE-2024-37309 | CrateDB 安全漏洞 — crate | 5.3 | Medium | 2024-06-13 |
| CVE-2024-31881 | IBM Db2 安全漏洞 — Db2 for Linux, UNIX and Windows | 6.5 | Medium | 2024-06-12 |
| CVE-2024-28762 | IBM DB2 安全漏洞 — Db2 for Linux, UNIX and Windows | 5.3 | Medium | 2024-06-12 |
| CVE-2024-32871 | Pimcore 安全漏洞 — pimcore | 7.5 | High | 2024-06-04 |
| CVE-2024-36378 | JetBrains TeamCity 安全漏洞 — TeamCity | 5.9 | Medium | 2024-05-29 |
| CVE-2024-35238 | Minder 安全漏洞 — minder | 5.3 | Medium | 2024-05-27 |
| CVE-2024-35231 | Contributed Rack Middleware and Utilities 安全漏洞 — rack-contrib | 8.6 | High | 2024-05-27 |
| CVE-2024-2874 | GitLab CE/EE 安全漏洞 — GitLab | 6.5 | Medium | 2024-05-23 |
| CVE-2024-33495 | Siemens 多款产品 安全漏洞 — SIMATIC RTLS Locating Manager | 6.5 | Medium | 2024-05-14 |
| CVE-2024-25969 | Dell PowerScale OneFS 安全漏洞 — PowerScale OneFS | 6.2 | Medium | 2024-05-14 |
| CVE-2024-28760 | IBM App Connect Enterprise 安全漏洞 — App Connect Enterprise | 4.3 | Medium | 2024-05-11 |
| CVE-2024-32874 | Frigate 安全漏洞 — frigate | 6.8 | Medium | 2024-05-09 |
| CVE-2024-2454 | GitLab 安全漏洞 — GitLab | 6.5 | Medium | 2024-05-09 |
| CVE-2024-4539 | GitLab CE/EE 资源管理错误漏洞 — GitLab | 4.3 | Medium | 2024-05-09 |
| CVE-2024-4140 | Email-MIME 安全漏洞 — Email-MIME | 7.5 | High | 2024-05-02 |
| CVE-2024-4029 | Wildfly 安全漏洞 | 4.1 | Medium | 2024-05-02 |
| CVE-2024-25026 | IBM WebSphere Application Server 和 IBM WebSphere Application Server Liberty 安全漏洞 — WebSphere Application Server | 5.9 | Medium | 2024-04-25 |
CWE-770（不加限制或调节的资源分配） 是常见的弱点类别，本平台收录该类弱点关联的 1491 条 CVE 漏洞。