Weaknesses of type CWE-404

695 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2023-0413MEDIUMDissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture fEPSS 0.9%CVE-2017-20186LOWnikooo777 ckSurf Spectator List Name misc.sp SpecListMenuDead denial of serviceEPSS 0.9%CVE-2025-1893MEDIUMOpen5GS AMF gmm-sm.c gmm_state_authentication denial of serviceEPSS 0.9%CVE-2024-55553HIGHIn FRRouting (FRR) before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the inteEPSS 0.9%CVE-2022-3810MEDIUMAxiomatic Bento4 mp42hevc Mp42Hevc.cpp AP4_File denial of serviceEPSS 0.9%CVE-2025-5404MEDIUMchaitak-gorai Blogbook GET Parameter search.php denial of serviceEPSS 0.8%CVE-2022-3809MEDIUMAxiomatic Bento4 mp4tag Mp4Tag.cpp ParseCommandLine denial of serviceEPSS 0.8%CVE-2024-57661HIGHAn issue in the sqlo_df component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQEPSS 0.8%CVE-2022-3812MEDIUMAxiomatic Bento4 mp4encrypt AP4_ContainerAtom memory leakEPSS 0.8%CVE-2023-0412MEDIUMTIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture fiEPSS 0.8%CVE-2022-3814MEDIUMAxiomatic Bento4 mp4decrypt memory leakEPSS 0.8%CVE-2022-3815MEDIUMAxiomatic Bento4 mp4decrypt memory leakEPSS 0.8%CVE-2022-3817MEDIUMAxiomatic Bento4 mp4mux memory leakEPSS 0.8%CVE-2022-3816MEDIUMAxiomatic Bento4 mp4decrypt memory leakEPSS 0.8%CVE-2022-3524MEDIUMLinux Kernel IPv6 ipv6_renew_options memory leakEPSS 0.8%CVE-2025-1925MEDIUMOpen5GS AMF nsmf-handler.c amf_nsmf_pdusession_handle_update_sm_context denial of serviceEPSS 0.8%CVE-2022-3354LOWOpen5GS UDP Packet ogs-tlv-msg.c denial of serviceEPSS 0.8%CVE-2023-5324MEDIUMeeroOS Ethernet Interface denial of serviceEPSS 0.8%CVE-2023-0414MEDIUMCrash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture fileEPSS 0.8%CVE-2024-12002MEDIUMTenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereferenceEPSS 0.8%