cve.bz

CWE-1088: Synchronous Access of Remote Resource without Timeout

Filter

The code has a synchronous call to a remote resource, but there is no timeout for the call, or the timeout is set to infinite.

What the weakness is: CWE-1088 at MITRE. All weaknesses

Ask an AI about CWE-1088

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1088: Synchronous Access of Remote Resource without Timeout and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1088.html and https://cve.bz/cve/cwe/1088?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2026-103649EPSS 0.3%

    Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery (denial of service). The server set its socket…

  2. 8.7CVE-2026-89147EPSS 0.5%

    Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connec…

  3. 8.7CVE-2026-81520EPSS 0.4%

    A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session open indefinitely by beginning a SASL-based login exchange and then declining to complete it. Because the negotiation loop…

  4. 3.1CVE-2025-4656EPSS 0.3%

    Vault Community and Vault Enterprise rekey and recovery key operations can lead to a denial of service due to uncontrolled cancellation by a Vault operator. This vulnerability (CVE-2025-4656) has been remediated in Vault Community Edition …

  5. 7.5CVE-2024-8062EPSS 0.5%

    A vulnerability in the typeahead endpoint of h2oai/h2o-3 version 3.46.0 allows for a denial of service. The endpoint performs a `HEAD` request to verify the existence of a specified resource without setting a timeout. An attacker can explo…

  6. 7.5CVE-2024-8061EPSS 0.5%

    In version 3.23.0 of aimhubio/aim, certain methods that request data from external servers do not have set timeouts, causing the server to wait indefinitely for a response. This can lead to a denial of service, as the tracking server does …

  7. 5.9CVE-2024-12777EPSS 0.5%

    A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service through the misuse of the sshfs-client. The tracking server, which is single-threaded, can be made unresponsive by requesting it to connect to an unresponsive so…

  8. 4.3CVE-2020-14483EPSS 0.4%

    A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart of Niagara (Versions 4.6.96.28, 4.7.109.20, 4.7.110.32, 4.8.0.110) and Niagara En…