Weaknesses of type CWE-404

695 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2022-1289MEDIUMtildearrow Furnace Incomplete Fix CVE-2022-1211 denial of serviceEPSS 1.2%CVE-2023-24444CRITICALJenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login.EPSS 1.1%CVE-2024-0419MEDIUMJasper httpdx HTTP POST Request denial of serviceEPSS 1.1%CVE-2019-0019HIGHBGP packets can trigger rpd crash when BGP tracing is enabled.EPSS 1.1%CVE-2022-4066LOWdavidmoreno onion Log response.c onion_response_flush allocation of resourcesEPSS 1.1%CVE-2024-0887MEDIUMMafiatic Blue Server Connection denial of serviceEPSS 1.1%CVE-2021-4250LOWcgriego active_attr Regex boolean_typecaster.rb call denial of serviceEPSS 1.1%CVE-2022-3353MEDIUMIEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy ProductsEPSS 1.1%CVE-2021-27458—If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions, PC10GE TCEPSS 1.1%CVE-2024-0732MEDIUMPCMan FTP Server STOR Command denial of serviceEPSS 1.1%CVE-2024-0731MEDIUMPCMan FTP Server PUT Command denial of serviceEPSS 1.1%CVE-2024-0888MEDIUMBORGChat Service Port 7551 denial of serviceEPSS 1.1%CVE-2024-20966MEDIUMVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 aEPSS 1.1%CVE-2022-3807MEDIUMAxiomatic Bento4 Incomplete Fix CVE-2019-13238 resource consumptionEPSS 1.1%CVE-2025-15532MEDIUMOpen5GS Timer resource consumptionEPSS 1.1%CVE-2024-51179HIGHAn issue in Open 5GS v.2.7.1 allows a remote attacker to cause a denial of service via the Network Function Virtualizations (NFVs) such as tEPSS 1.1%CVE-2019-1706HIGHCisco Adaptive Security Appliance Software IPsec Denial of Service VulnerabilityEPSS 1.1%CVE-2023-0850LOWNetgear WNDR3700v2 Web Interface denial of serviceEPSS 1.0%CVE-2025-1877HIGHD-Link DAP-1562 HTTP POST Request pure_auth_check null pointer dereferenceEPSS 1.0%CVE-2020-16100HIGHIt is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service's DCOM websocket thread due to imEPSS 1.0%