CWE-770 不加限制或调节的资源分配 类弱点 1489 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-770 属于资源管理缺陷，指系统在分配可复用资源时未实施限制或节流措施。攻击者通常通过发送大量请求耗尽系统资源，导致拒绝服务或性能瘫痪。开发者应通过设置并发上限、实施速率限制及监控资源使用率来缓解风险，确保关键资源分配受到严格管控，防止恶意滥用。
sock=socket(AF_INET, SOCK_STREAM, 0); while (1) { newsock=accept(sock, ...); printf("A connection has been accepted\n"); pid = fork(); }int writeDataFromSocketToFile(char *host, int port) { char filename[FILENAME_SIZE]; char buffer[BUFFER_SIZE]; int socket = openSocketConnection(host, port); if (socket < 0) { printf("Unable to open socket connection"); return(FAIL); } if (getNextMessage(socket, filename, FILENAME_SIZE) > 0) { if (openFileToWrite(filename) > 0) { while (getNextMessage(socket, buffer, BUFFER_SIZE) > 0){ if (!(writeToFile(buffer) > 0)) break; } } closeFile(); } closeSocket(socket); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-21875 | Hacker Hotel Badge 安全漏洞 — Hacker Hotel Badge 2024 | 6.5 | Medium | 2024-02-11 |
| CVE-2024-1066 | GitLab Enterprise Edition 安全漏洞 — GitLab | 6.5 | Medium | 2024-02-07 |
| CVE-2024-25143 | Liferay Portal和Liferay DXP 安全漏洞 — DXP | 6.5 | Medium | 2024-02-07 |
| CVE-2023-22819 | Western Digital 多款产品安全漏洞 — My Cloud OS 5 | 4.9 | Medium | 2024-02-05 |
| CVE-2024-23826 | spbu_se_site 安全漏洞 — spbu_se_site | 6.8 | Medium | 2024-01-29 |
| CVE-2024-23820 | OpenFGA 安全漏洞 — openfga | 5.3 | Medium | 2024-01-26 |
| CVE-2024-21604 | Juniper Networks Junos OS Evolved 安全漏洞 — Junos OS Evolved | 7.5 | High | 2024-01-12 |
| CVE-2023-37934 | Fortinet FortiPAM 安全漏洞 — FortiPAM | 4.2 | Medium | 2024-01-10 |
| CVE-2023-6476 | CRI-O 安全漏洞 — Red Hat OpenShift Container Platform 4.13 | 6.5 | Medium | 2024-01-09 |
| CVE-2024-21634 | Amazon Ion 安全漏洞 — ion-java | 7.5 | High | 2024-01-03 |
| CVE-2023-46738 | CubeFS 安全漏洞 — cubefs | 6.5 | Medium | 2024-01-03 |
| CVE-2023-6910 | M-Files Server 资源管理错误漏洞 — M-Files Server | 6.5 | Medium | 2023-12-20 |
| CVE-2023-6563 | Red Hat Keycloak 安全漏洞 — Red Hat Single Sign-On 7.6 for RHEL 7 | 7.7 | High | 2023-12-14 |
| CVE-2023-5379 | Red Hat Undertow 安全漏洞 — Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 | 7.5 | High | 2023-12-12 |
| CVE-2023-50247 | H2O 安全漏洞 — h2o | 3.7 | Low | 2023-12-12 |
| CVE-2023-6337 | HashiCorp Vault 安全漏洞 — Vault | 7.5 | High | 2023-12-08 |
| CVE-2023-4912 | GitLab 安全漏洞 — GitLab | 2.6 | Low | 2023-12-01 |
| CVE-2023-34389 | Schweitzer Engineering Laboratories SEL-411L 安全漏洞 — SEL-451 | 4.5 | Medium | 2023-11-30 |
| CVE-2023-42504 | Apache Superset 安全漏洞 — Apache Superset | 5.8 | Medium | 2023-11-28 |
| CVE-2023-6117 | M-Files 安全漏洞 — M-Files Server | 5.7 | Medium | 2023-11-22 |
| CVE-2023-47108 | OpenTelemetry-Go Contrib 安全漏洞 — opentelemetry-go-contrib | 7.5 | High | 2023-11-10 |
| CVE-2023-47120 | Discourse 安全漏洞 — discourse | 7.5 | High | 2023-11-10 |
| CVE-2023-46130 | Discourse 安全漏洞 — discourse | 4.3 | Medium | 2023-11-10 |
| CVE-2023-5963 | GitLab 安全漏洞 — GitLab | 3.1 | Low | 2023-11-06 |
| CVE-2023-3246 | GitLab 安全漏洞 — GitLab | 4.3 | Medium | 2023-11-06 |
| CVE-2023-20155 | Cisco Firepower Management Center 安全漏洞 — Cisco Firepower Management Center | 7.5 | High | 2023-11-01 |
| CVE-2023-5625 | Eventlet 安全漏洞 — Ironic content for Red Hat OpenShift Container Platform 4.12 | 5.3 | Medium | 2023-11-01 |
| CVE-2023-45130 | Frontier 安全漏洞 — frontier | 7.5 | High | 2023-10-13 |
| CVE-2023-5573 | vrite 安全漏洞 — vriteio/vrite | 6.5 | - | 2023-10-13 |
| CVE-2023-44191 | Juniper Networks Junos OS 安全漏洞 — Junos OS | 7.5 | High | 2023-10-12 |
CWE-770（不加限制或调节的资源分配） 是常见的弱点类别，本平台收录该类弱点关联的 1489 条 CVE 漏洞。