Skip to content
OpenAdvisories

Weakness (CWE)

CWE-410: Insufficient Resource Pool

Class Incomplete

The product's resource pool is not large enough to handle peak demand.

How to prevent it (5 mitigations)

  1. Architecture and Design

    Do not perform resource-intensive transactions for unauthenticated users and/or invalid requests.

  2. Architecture and Design

    Consider implementing a velocity check mechanism which would detect abusive behavior.

  3. Operation

    Consider load balancing as an option to handle heavy loads.

  4. Implementation

    Make sure that resource handles are properly closed when no longer needed.

  5. Architecture and Design

    Identify the system's resource intensive operations and consider protecting them from abuse (e.g. malicious automated script which runs the resources out).

Source: MITRE CWE-410

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.5
    CVE-2025-41653

    Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches

    An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive.

    Weidmueller IE-SW-PL16MT-16TX IE-SW-VL08MT-5TX-1SC-2SCS IE-SW-PL18MT-2GC-16TX
  • High 7.5
    CVE-2025-27479

    Kerberos Key Distribution Proxy Service Denial of Service Vulnerability

    Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  • High 7.5
    CVE-2023-38505

    DietPi-Dashboard Insufficient TLS Handshake Pool

    DietPi-Dashboard is a web dashboard for the operating system DietPi. The dashboard only allows for one TLS handshake to be in process at a given moment. Once a TCP connection is established in HTTPS mode, it will assume that it should be waiting for a handsha…

    ravenclaw900 DietPi-Dashboard
  • High 7.5
    CVE-2022-2048

    Jetty vulnerable to Invalid HTTP/2 requests that can lead to denial of service

    In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario w…

    The Eclipse Foundation Eclipse Jetty jetty9 jenkins Debian Ubuntu Alpine Maven
  • High 8.6
    CVE-2021-1615

    Cisco Embedded Wireless Controller Software for Catalyst Access Points Denial of Service Vulnerability

    A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller (EWC) Software for Catalyst Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected AP. This v…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 7.5
    CVE-2019-0056

    Junos OS: MX Series: An MPC10 Denial of Service (DoS) due to OSPF states transitioning to Down, causes traffic to stop forwarding through the device.

    This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path First (OSPF) states…

    Juniper Networks Junos OS Network devices