CWE-770 不加限制或调节的资源分配 类弱点 1489 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-770 属于资源管理缺陷，指系统在分配可复用资源时未实施限制或节流措施。攻击者通常通过发送大量请求耗尽系统资源，导致拒绝服务或性能瘫痪。开发者应通过设置并发上限、实施速率限制及监控资源使用率来缓解风险，确保关键资源分配受到严格管控，防止恶意滥用。
sock=socket(AF_INET, SOCK_STREAM, 0); while (1) { newsock=accept(sock, ...); printf("A connection has been accepted\n"); pid = fork(); }int writeDataFromSocketToFile(char *host, int port) { char filename[FILENAME_SIZE]; char buffer[BUFFER_SIZE]; int socket = openSocketConnection(host, port); if (socket < 0) { printf("Unable to open socket connection"); return(FAIL); } if (getNextMessage(socket, filename, FILENAME_SIZE) > 0) { if (openFileToWrite(filename) > 0) { while (getNextMessage(socket, buffer, BUFFER_SIZE) > 0){ if (!(writeToFile(buffer) > 0)) break; } } closeFile(); } closeSocket(socket); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-31446 | OpenComputers 安全漏洞 — OpenComputers | 7.7 | High | 2024-04-16 |
| CVE-2024-1666 | Lunary 安全漏洞 — lunary-ai/lunary | 5.3 | - | 2024-04-16 |
| CVE-2024-29903 | cosign 安全漏洞 — cosign | 4.2 | Medium | 2024-04-10 |
| CVE-2024-29902 | cosign 安全漏洞 — cosign | 4.2 | Medium | 2024-04-10 |
| CVE-2024-3382 | Palo Alto Networks PAN-OS 安全漏洞 — PAN-OS | 7.5 | High | 2024-04-10 |
| CVE-2024-26276 | Siemens Parasolid 安全漏洞 — JT2Go | 3.3 | Low | 2024-04-09 |
| CVE-2024-0081 | NVIDIA NeMo 安全漏洞 — NeMo | 8.6 | High | 2024-04-05 |
| CVE-2024-27316 | Apache httpd 资源管理错误漏洞 — Apache HTTP Server | 7.5 | - | 2024-04-04 |
| CVE-2024-30249 | Cloudburst Network 安全漏洞 — Network | 8.6 | High | 2024-04-04 |
| CVE-2024-27268 | IBM WebSphere Application Server Liberty 资源管理错误漏洞 — WebSphere Application Server Liberty | 5.9 | Medium | 2024-04-04 |
| CVE-2024-28871 | LibHTP 安全漏洞 — libhtp | 7.5 | High | 2024-04-04 |
| CVE-2024-28182 | Nghttp2 安全漏洞 — nghttp2 | 5.3 | Medium | 2024-04-04 |
| CVE-2024-22189 | quic-go 安全漏洞 — quic-go | 7.5 | High | 2024-04-04 |
| CVE-2024-28870 | Suricata 安全漏洞 — suricata | 7.5 | High | 2024-04-03 |
| CVE-2024-29086 | OpenHarmony 安全漏洞 — OpenHarmony | 3.3 | Low | 2024-04-02 |
| CVE-2024-22353 | IBM WebSphere Application Server Liberty 资源管理错误漏洞 — WebSphere Application Server Liberty | 5.9 | Medium | 2024-03-31 |
| CVE-2024-2818 | GitLab 安全漏洞 — GitLab | 4.3 | Medium | 2024-03-28 |
| CVE-2024-29025 | Netty 安全漏洞 — netty | 5.3 | Medium | 2024-03-25 |
| CVE-2023-41038 | Firebird 安全漏洞 — firebird | 7.5 | High | 2024-03-20 |
| CVE-2020-11862 | OpenText NetIQ Privileged Account Manager 安全漏洞 — NetIQ Privileged Account Manager | 8.6 | High | 2024-03-13 |
| CVE-2024-28102 | jwcrypto 安全漏洞 — jwcrypto | 6.8 | Medium | 2024-03-06 |
| CVE-2024-23837 | LibHTP 安全漏洞 — libhtp | 7.5 | High | 2024-02-26 |
| CVE-2024-23836 | Suricata 安全漏洞 — suricata | 7.5 | High | 2024-02-26 |
| CVE-2022-34357 | IBM Cognos Analytics 安全漏洞 — Cognos Analytics | 6.5 | Medium | 2024-02-24 |
| CVE-2023-51393 | Silicon Labs Gecko SDK 安全漏洞 — Ember ZNet SDK | 5.3 | Medium | 2024-02-23 |
| CVE-2024-0563 | M-Files Server 安全漏洞 — M-Files Server | 4.3 | Medium | 2024-02-23 |
| CVE-2024-26265 | Liferay Portal 和 Liferay DXP 安全漏洞 — Portal | 5.0 | Medium | 2024-02-20 |
| CVE-2024-26308 | Apache Commons Compress 安全漏洞 — Apache Commons Compress | 7.5 | - | 2024-02-19 |
| CVE-2024-23979 | F5 BIG-IP 安全漏洞 — BIG-IP | 7.5 | High | 2024-02-14 |
| CVE-2024-21771 | F5 BIG-IP AFM 安全漏洞 — BIG-IP | 7.5 | High | 2024-02-14 |
CWE-770（不加限制或调节的资源分配） 是常见的弱点类别，本平台收录该类弱点关联的 1489 条 CVE 漏洞。