Skip to content
OpenAdvisories

Weakness (CWE)

CWE-774: Allocation of File Descriptors or Handles Without Limits or Throttling

Variant Incomplete

The product allocates file descriptors or handles on behalf of an actor without imposing any restrictions on how many descriptors can be allocated, in violation of the intended security policy for that actor.

How to prevent it (1 mitigation)

  1. Operation, Architecture and Design

    Use resource-limiting settings provided by the operating system or environment. For example, when managing system resources in POSIX, setrlimit() can be used to set limits for certain types of resources, and getrlimit() can determine how many resources are available. However, these functions are not available on all operating systems.

    When the current levels get close to the maximum that is defined for the application (see CWE-770), then limit the allocation of further resources to privileged users; alternately, begin releasing resources for less-privileged users. While this mitigation may protect the system from attack, it will not necessarily stop attackers from adversely impacting other users.

    Ensure that the application performs the appropriate error checks and error handling in case resources become unavailable (CWE-703).

Source: MITRE CWE-774

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Low 2.3
    CVE-2026-22056

    CVE-2026-22056 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)

    StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher in a non-standard configuration and scenario are susceptible to a Denial of Service vulnerability. Successful exploit could allow an attacker with some control over the environment to cause …

    NETAPP StorageGRID
  • Medium 6.9
    CVE-2026-27887

    Spin has memory leaks in various WIT interfaces

    Spin is an open source developer tool for building and running serverless applications powered by WebAssembly. When Spin is configured to allow connections to a database or web server which could return responses of unbounded size (e.g. tables with many rows …

    spinframework SpinKube spin containerd-shim-spin
  • Medium 6.9
    CVE-2026-27204

    Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion

    Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.6, 36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implementation of WASI host interfaces are susceptible to guest-controlled resource exhaustion on the host. Wasmtime did not appropriately place li…

    bytecodealliance wasmtime wasmtime rust-wasmtime Debian Ubuntu crates.io
  • Medium 6.5
    CVE-2024-48848

    LARGECONTENT - device disk overutilization

    Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MATRIX Series: through 3.*.

    ABB ASPECT-Enterprise MATRIX Series NEXUS Series ICS / OT
  • Low 3.7
    GHSA-r5w7-f542-q2j4

    Potential DoS when using ContextLines integration

    ### Impact The [ContextLines integration](https://docs.sentry.io/platforms/javascript/guides/node/configuration/integrations/contextlines/) uses readable streams to more efficiently use memory when reading files. The ContextLines integration is used to attach…

    @sentry/nextjs @sentry/astro @sentry/sveltekit @sentry/aws-serverless npm