Weaknesses of type CWE-404

695 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2019-0049HIGHJunos OS: RPD process crashes when BGP peer restartsEPSS 1.5%CVE-2025-8175HIGHD-Link DI-8400 jhttpd usb_paswd.asp null pointer dereferenceEPSS 1.5%CVE-2019-5636MEDIUMBeckhoff TwinCAT Discovery Service Denial of ServiceEPSS 1.4%CVE-2017-11480—Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening fEPSS 1.4%CVE-2025-24160MEDIUMThe issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS SonoEPSS 1.4%CVE-2023-34969MEDIUMD-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is usinEPSS 1.4%CVE-2025-4749HIGHD-Link DI-7003GV2 Factory Reset backup.asp sub_4983B0 denial of serviceEPSS 1.4%CVE-2024-0263MEDIUMACME Ultra Mini HTTPd HTTP GET Request denial of serviceEPSS 1.4%CVE-2024-1017MEDIUMGabriels FTP Server denial of serviceEPSS 1.4%CVE-2024-0885MEDIUMSpyCamLizard HTTP GET Request denial of serviceEPSS 1.4%CVE-2024-0889MEDIUMKmint21 Golden FTP Server PASV Command denial of serviceEPSS 1.4%CVE-2024-0547MEDIUMAbility FTP Server APPE Command denial of serviceEPSS 1.4%CVE-2024-1016MEDIUMSolar FTP Server PASV Command denial of serviceEPSS 1.4%CVE-2024-0548MEDIUMFreeFloat FTP Server SIZE Command denial of serviceEPSS 1.3%CVE-2022-3553LOWX.org Server xquartz X11Controller.m denial of serviceEPSS 1.3%CVE-2013-1054MEDIUMPossible remote DOS in WebAppsEPSS 1.3%CVE-2019-0043HIGHJunos OS: RPD process crashes upon receipt of a specific SNMP packetEPSS 1.3%CVE-2022-3621MEDIUMLinux Kernel nilfs2 inode.c nilfs_bmap_lookup_at_level null pointer dereferenceEPSS 1.3%CVE-2021-4432MEDIUMPCMan FTP Server USER Command denial of serviceEPSS 1.3%CVE-2024-0418MEDIUMiSharer and upRedSun File Sharing Wizard GET Request denial of serviceEPSS 1.3%