← Back
CWE-400

4,105 CVEs • Abstraction: Class • Likelihood of Exploit: High

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

JSON object

Loading...

CVEs (4,105)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2002-1873
1Microsoft
1Exchange Server
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash or memory consumption) via malformed MSRPC calls.
CVE-2002-0368
1Microsoft
1Exchange Server
Apr 16, 2026
Jun 18, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with a malformed RFC message attribute, aka "Malformed Mail Attribute can Cause Excha...Show more
The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with a malformed RFC message attribute, aka "Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources."Show less
CVE-2001-0827
1Grant Averett
1Ceberus Ftp Server
Apr 16, 2026
Dec 6, 2001
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service (crash) via a large number of "PASV" requests.
CVE-2001-0666
1Microsoft
1Exchange Server
Apr 16, 2026
Oct 30, 2001
N/A· v4
N/A· v3
2.1 LOW· v2
Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox.
CVE-1999-0159
1Cisco
1Ios
Apr 16, 2026
Aug 12, 1998
N/A· v4
3.5 LOW· v3
5.0 MEDIUM· v2
Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). This applies to some IOS 9.x, 10.x, and 11.x releases.