Weakness (CWE)
CWE-410: Insufficient Resource Pool
The product's resource pool is not large enough to handle peak demand.
How to prevent it (5 mitigations)
-
Architecture and Design
Do not perform resource-intensive transactions for unauthenticated users and/or invalid requests.
-
Architecture and Design
Consider implementing a velocity check mechanism which would detect abusive behavior.
-
Operation
Consider load balancing as an option to handle heavy loads.
-
Implementation
Make sure that resource handles are properly closed when no longer needed.
-
Architecture and Design
Identify the system's resource intensive operations and consider protecting them from abuse (e.g. malicious automated script which runs the resources out).
Source: MITRE CWE-410
22 results · Feed
-
Low 3.7
Insufficient Resource Pool in hMailServer
Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to cause a certificate issuance or renewal to fail. When the server obtains or renews a TLS certif…
-
Medium 5.3
Samba: dns signing dos via tkey name cache exhaustion
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests w…
-
Medium 5.3
BIG-IP BFD vulnerability
When Bidirectional Forwarding Detection (BFD) is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to stop processing BFD packets and cause the configured routing protocol to fail over. …
-
Low 3.5
IBM Jazz Reporting Service Denial of Service
IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling.
-
Medium 6.0
Denial of Service Vulnerability in Silicon Labs WF200 and WGM160P Devices
When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service triggered by a malformed packet. The device may recover automatically or require a hard reset.
-
High 7.5
Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches
An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive.
-
Medium 6.5
Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated use…
-
High 7.5
Kerberos Key Distribution Proxy Service Denial of Service Vulnerability
Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network.
-
Medium 5.3
Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthe…
-
Medium 5.9CVE-2025-0453 EPSS 11%
Denial of Service through Batched Queries in GraphQL in mlflow/mlflow
In mlflow/mlflow version 2.17.2, the `/graphql` endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment. This can tie up all the workers allocated by MLFlow…
-
Medium 4.3
ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability
ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of ChargePoint Home Flex charging devices. Authentication is not…
-
Medium 5.3
Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU…
-
High 7.5
DietPi-Dashboard Insufficient TLS Handshake Pool
DietPi-Dashboard is a web dashboard for the operating system DietPi. The dashboard only allows for one TLS handshake to be in process at a given moment. Once a TCP connection is established in HTTPS mode, it will assume that it should be waiting for a handsha…
-
Medium 5.3CVE-2022-40224 EPSS 65%
A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Sw…
-
Medium 6.5
Dell PowerScale OneFS 8.2.x, 9.0.0.x - 9.4.0.x, contain an insufficient resource pool vulnerability. A remote unauthent…
-
Medium 5.3
A vulnerability in a feature that monitors RADIUS requests on Cisco Identity Services Engine (ISE) Software could allow…
-
High 7.5
Jetty vulnerable to Invalid HTTP/2 requests that can lead to denial of service
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario w…
-
Medium 6.5
Junos OS: EX4300: PFE Denial of Service (DoS) upon receipt of a flood of specific ARP traffic
A Denial of Service (DoS) vulnerability in the processing of a flood of specific ARP traffic in Juniper Networks Junos OS on the EX4300 switch, sent from the local broadcast domain, may allow an unauthenticated network-adjacent attacker to trigger a PFEMAN wa…
-
High 8.6
Cisco Embedded Wireless Controller Software for Catalyst Access Points Denial of Service Vulnerability
A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller (EWC) Software for Catalyst Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected AP. This v…
-
Unscored —
A vulnerability has been identified in SIMATIC WinAC RTX (F) 2010 (All versions < SP3 Update 1). Affected versions of t…
-
High 7.5
Junos OS: MX Series: An MPC10 Denial of Service (DoS) due to OSPF states transitioning to Down, causes traffic to stop forwarding through the device.
This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path First (OSPF) states…
-
Unscored —
A vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All Versions < V2.6). An attack…