Metalikelihood: Highseverity: MediumStable

CAPEC-125Flooding

Abstraction
Meta
Status
Stable
Likelihood
High
Severity
Medium

Description

An adversary consumes the resources of a target by rapidly engaging in a large number of interactions with the target. This type of attack generally exposes a weakness in rate limiting or flow. When successful this attack prevents legitimate users from accessing the service and can cause the target to crash. This attack differs from resource depletion through leaks or allocations in that the latter attacks do not rely on the volume of requests made to the target but instead focus on manipulation of the target's operations. The key factor in a flooding attack is the number of requests the adversary can make in a given period of time. The greater this number, the more likely an attack is to succeed against a given target.

Related weaknesses· 2

CWE-404CWE-770

MITRE ATT&CK crosswalk· 2

T1498.001: Network Denial of Service: Direct Network FloodT1499: Endpoint Denial of Service

Exploits2

TypeTargetConfidenceTier
WeaknessAllocation of Resources Without Limits or Throttlingcwe-770100%live
WeaknessImproper Resource Shutdown or Releasecwe-404100%live

Related to2

TypeTargetConfidenceTier
SubTechniqueDirect Network Floodt1498.001100%live
TechniqueEndpoint Denial of Servicet1499100%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CAPEC
HTTP Flood
CAPEC
XML Flood
CAPEC
SSL Flood
CAPEC
ICMP Flood
CAPEC
TCP Flood
CAPEC
Excessive Allocation
Sourced from MITRE CAPEC. Curated by Adam Lundqvist, SQUR.