Weaknesses of type CWE-404

695 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2022-40890HIGHA vulnerability in /src/amf/amf-context.c in Open5GS 2.4.10 and earlier leads to AMF denial of service.EPSS 0.9%CVE-2014-125066MEDIUMemmflo yuko-bot denial of serviceEPSS 0.9%CVE-2018-25087LOWArborator Server project.cgi start denial of serviceEPSS 0.9%CVE-2024-7887MEDIUMLimeSurvey File Upload index.php denial of serviceEPSS 0.9%CVE-2025-5935MEDIUMOpen5GS AMF/MME emm-sm.c common_register_state denial of serviceEPSS 0.9%CVE-2022-4565MEDIUMDromara HuTool cn.hutool.core.util.ZipUtil.java resource consumptionEPSS 0.9%CVE-2018-25062LOWflar2 ElementalX ipsec xfrm_user.c xfrm_dump_policy_done denial of serviceEPSS 0.9%CVE-2023-5462MEDIUMXINJE XD5E-30R-E Modbus denial of serviceEPSS 0.9%CVE-2017-20154LOWghostlander Phoenixcoin main.cpp accept denial of serviceEPSS 0.9%CVE-2023-0848MEDIUMNetgear WNDR3700v2 Web Management Interface denial of serviceEPSS 0.9%CVE-2023-5459MEDIUMDelta Electronics DVP32ES2 PLC Password Transmission denial of serviceEPSS 0.9%CVE-2022-3646LOWLinux Kernel BPF segment.c nilfs_attach_log_writer memory leakEPSS 0.9%CVE-2025-3167HIGHTenda AC23 API Interface VerAPIMant denial of serviceEPSS 0.9%CVE-2015-10025LOWluelista miniConf URL Scanning MessageView.cs denial of serviceEPSS 0.9%CVE-2023-2926MEDIUMSeaCMS Picture Upload member.php denial of serviceEPSS 0.9%CVE-2018-25098MEDIUMblockmason credit-protocol UCAC CreditProtocol.sol executeUcacTx denial of serviceEPSS 0.9%CVE-2010-10001MEDIUMShemes GrabIt NZB Date Parser denial of serviceEPSS 0.9%CVE-2023-0417MEDIUMMemory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafteEPSS 0.9%CVE-2023-0413MEDIUMDissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture fEPSS 0.9%CVE-2023-0415MEDIUMiSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture fEPSS 0.9%