Weaknesses of type CWE-404

695 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2018-8405HIGHAn elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "EPSS 3.4%KEVCVE-2024-22019HIGHA vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resourEPSS 3.2%CVE-2023-45802—Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RSTEPSS 3.0%CVE-2024-39721HIGHAn issue was discovered in Ollama before 0.1.34. The CreateModelHandler function uses os.Open to read a file until completion. The req.Path EPSS 2.7%CVE-2022-3594MEDIUMLinux Kernel BPF r8152.c intr_callback logging of excessive dataEPSS 2.4%CVE-2025-9784HIGHUndertow: undertow madeyoureset http/2 ddos vulnerabilityEPSS 2.3%CVE-2022-2191HIGHIn Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release ByteBuffers from configured ByEPSS 2.2%CVE-2019-1705MEDIUMCisco Adaptive Security Appliance Software VPN Denial of Service VulnerabilityEPSS 2.2%CVE-2019-1708HIGHCisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software MOBIKE Denial of Service VulnerabilityEPSS 2.0%CVE-2020-26070HIGHCisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers Slow Path Forwarding Denial of Service VulnerabilityEPSS 1.9%CVE-2025-0492HIGHD-Link DIR-823X FUN_00412244 null pointer dereferenceEPSS 1.9%CVE-2022-3551LOWX.org Server xkb.c ProcXkbGetKbdByName memory leakEPSS 1.9%CVE-2020-16233—An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packets containing data fEPSS 1.8%CVE-2019-0052HIGHSRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packetsEPSS 1.8%CVE-2025-4756MEDIUMD-Link DI-7003GV2 restart.asp denial of serviceEPSS 1.8%CVE-2020-3338HIGHCisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service VulnerabilityEPSS 1.8%CVE-2020-3555MEDIUMCisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Denial of Service VulnerabilityEPSS 1.7%CVE-2022-33324HIGHDenial-of-Service Vulnerability in Ethernet port of MELSEC iQ-R, iQ-L Series and MELIPC SeriesEPSS 1.7%CVE-2023-1443MEDIUMFilseclab Twister Antivirus IoControlCode fildds.sys 0x80112053 denial of serviceEPSS 1.6%CVE-2019-0044HIGHJunos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interfaceEPSS 1.6%