Common Weakness Enumeration
CWE-1088 Synchronous Access of Remote Resource without Timeout
Description
The code has a synchronous call to a remote resource, but there is no timeout for the call, or the timeout is set to infinite.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-1088 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-6w7p-xrvp-p7xv | CVE-2024-8061 | HIGH |
Aim allows denial of service due to no timeouts for some tracking server endpoints |
2025-10-15 | |
| GHSA-fhc2-8qx8-6vj7 | CVE-2025-4656 | LOW |
Vault Community Edition rekey and recovery key operations can cause denial of service |
2025-06-27 | |
| GHSA-v5pj-jrpv-h6g2 | CVE-2024-12777 | MODERATE |
Aim vulnerable to Synchronous Access of Remote Resource without Timeout |
2025-03-21 | |
| GHSA-5c8j-g96x-cj78 | CVE-2024-8062 | HIGH |
H2O Vulnerable to Denial of Service (DoS) via `HEAD` Request |
2025-03-20 | |
| GHSA-3jqw-crqj-w8qw | CVE-2011-4137 | HIGH |
Denial of service in django |
2024-09-16 |