What MITRE CWE-400 - Uncontrolled Resource Consumption requires
CWE-400 (Uncontrolled Resource Consumption) is a CWE Top 25 weakness underlying denial-of-service vulnerabilities including algorithmic complexity attacks, regex denial of service (ReDoS), billion laughs and quadratic blowup XML attacks, decompression bombs (zip bomb), and excessive memory or CPU consumption in parsers. CWE-400 is defined as: the product does not properly control the allocation and maintenance of a limited resource. The Extended Description identifies several common resource-exhaustion scenarios: lack of throttling for the number of allocated resources; lost references to resources before shutdown; failure to close or return resources after processing. These problems often stem from error handling confusion or uncertainty about which code component bears responsibility for resource release. Common Consequences include availability impact: if an attacker can trigger the allocation of the limited resources but the number or size of the resources is not controlled, then the most common result is denial of service; this may cause the product to slow down, crash, or lock out legitimate users; host operating systems can also be affected. Access control impact: in some cases it may be possible to force the product to fail open in the event of resource exhaustion, potentially compromising security functionality. Potential Mitigations include architecture and design: design throttling mechanisms into system architecture; implement strong authentication and access control models; protect login applications against DoS attacks; cache database result sets to minimize resource expenditure; track request rates and block requests exceeding defined thresholds; ensure protocols have specific scale limits. Implementation: ensure that all failures in resource allocation place the system into a safe posture.
Pillar: Cybersecurity · Authority: MITRE Corporation / Common Weakness Enumeration · Version: 1.0.0 · Last updated:
Primary source: https://cwe.mitre.org/data/definitions/400.html
SHA-256 integrity: 8d2c92c0885aa0ed42f39799ed718959ffbac9828cfab0bc232afffb7cf69295
Primary Citations — 10 traced to source
- CWE-400: Uncontrolled Resource Consumption - MITRE Common Weakness Enumeration at https://cwe.mitre.org/data/definitions/400.html
- CWE-400 Definition - the product does not properly control the allocation and maintenance of a limited resource
+ 8 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/mitre-cwe-400-uncontrolled-resource-consumption.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/mitre-cwe-400-uncontrolled-resource-consumption.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/mitre-cwe-400-uncontrolled-resource-consumption
- Back to registry: Browse all 10,085 compliance nodes