CWE-410—Insufficient Resource Pool

名称

Insufficient Resource Pool

描述

The product's resource pool is not large enough to handle peak demand, which allows an attacker to prevent others from accessing the resource by using a (relatively) large number of requests for resources.

Frequently the consequence is a "flood" of connection or sessions.

常见后果

范围：

Availability, Integrity, Other

影响：

DoS: Crash, Exit, or Restart, Other

注释：

Floods often cause a crash or other problem besides denial of the resource itself; these are likely examples of *other* vulnerabilities, not an insufficient resource pool.

相关 CWE

• CWE-400Uncontrolled Resource ConsumptionHigh
• CWE-664Improper Control of a Resource Through its Lifetime