Excessive Platform Resource Consumption within a Loop

Opis

The product has a loop body or loop condition that contains a control element that directly or indirectly consumes platform resources, e.g. messaging, sessions, locks, or file descriptors.

Skutki

• Availability

  DoS: Resource Consumption (CPU); DoS: Resource Consumption (Memory); DoS: Resource Consumption (Other); Reduce Performance

  This issue can make the product perform more slowly. If an attacker can influence the number of iterations in the loop, then this performance problem might allow a denial of service by consuming more platform resources than intended.

Słabość nadrzędna

• CWE-405 Asymmetric Resource Consumption (Amplification)

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific

Źródła

1. Automated Source Code Performance Efficiency Measure (ASCPEM) — Object Management Group (OMG), ASCPEM-PRF-8, 2016