Weaknesses of type CWE-404

747 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2022-40890HIGHA vulnerability in /src/amf/amf-context.c in Open5GS 2.4.10 and earlier leads to AMF denial of service.EPSS 1.0%CVE-2023-3760MEDIUMIntergard SGS Change Password denial of serviceEPSS 1.0%CVE-2024-0736MEDIUMEFS Easy File Sharing FTP Login denial of serviceEPSS 1.0%CVE-2022-3813MEDIUMAxiomatic Bento4 mp4edit memory leakEPSS 1.0%CVE-2025-11550HIGHTenda W12 HTTP Request modules wifiScheduledSet null pointer dereferenceEPSS 1.0%CVE-2018-25062LOWflar2 ElementalX ipsec xfrm_user.c xfrm_dump_policy_done denial of serviceEPSS 1.0%CVE-2017-20154LOWghostlander Phoenixcoin main.cpp accept denial of serviceEPSS 1.0%CVE-2024-0695MEDIUMEFS Easy Chat Server HTTP GET Request denial of serviceEPSS 1.0%CVE-2022-4565MEDIUMDromara HuTool cn.hutool.core.util.ZipUtil.java resource consumptionEPSS 1.0%CVE-2022-23010—On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when EPSS 1.0%CVE-2015-10085LOWGoPistolet MTA denial of serviceEPSS 0.9%CVE-2014-125066MEDIUMemmflo yuko-bot denial of serviceEPSS 0.9%CVE-2020-27283MEDIUMAn attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak arbitrary memory locatiEPSS 0.9%CVE-2021-21003MEDIUMDenial of Service Vulnerability in Phoenix Contact FL SWITCH SMCS series productsEPSS 0.9%CVE-2022-3354LOWOpen5GS UDP Packet ogs-tlv-msg.c denial of serviceEPSS 0.9%CVE-2023-0936MEDIUMTP-Link Archer C50 Web Management Interface denial of serviceEPSS 0.9%CVE-2025-5404MEDIUMchaitak-gorai Blogbook GET Parameter search.php denial of serviceEPSS 0.9%CVE-2024-21052MEDIUMVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and priEPSS 0.9%CVE-2022-3669MEDIUMAxiomatic Bento4 mp4edit Create memory leakEPSS 0.9%CVE-2015-10025LOWluelista miniConf URL Scanning MessageView.cs denial of serviceEPSS 0.9%