Weaknesses of type CWE-404

748 results

Liberação ou encerramento impróprio de recursos

Acontece quando a aplicação não libera adequadamente recursos (memória, conexões de banco de dados, arquivos abertos, sockets) após seu uso, deixando-os presos. Isso causa vazamento de recursos: a aplicação consome cada vez mais memória ou conexões até ficar indisponível ou travar.

Example

Um serviço web abre uma conexão com o banco de dados para cada requisição, mas em caso de erro não fecha a conexão no bloco finally ou com try-with-resources. Após milhares de requisições falhadas, o pool de conexões se esgota e novas requisições começam a falhar.

How to mitigate

Use try-with-resources (Java), context managers (Python), ou finally blocks para garantir liberação mesmo em caso de exceção. Implemente testes de carga e monitore vazamento de recursos em produção com ferramentas APM.

CVE-2021-4249MEDIUMxml-conduit DOCTYPE Entity Expansion Parse.hs infinite loopEPSS 0.8%CVE-2023-0412MEDIUMTIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture fiEPSS 0.8%CVE-2025-1925MEDIUMOpen5GS AMF nsmf-handler.c amf_nsmf_pdusession_handle_update_sm_context denial of serviceEPSS 0.8%CVE-2025-4867HIGHTenda A15 ArpNerworkSet formArpNerworkSet denial of serviceEPSS 0.8%CVE-2025-2958HIGHTRENDnet TEW-818DRU HTTP Request httpd denial of serviceEPSS 0.8%CVE-2022-3663MEDIUMAxiomatic Bento4 MP4fragment Ap4StsdAtom.cpp AP4_StsdAtom null pointer dereferenceEPSS 0.8%CVE-2022-3668MEDIUMAxiomatic Bento4 mp4edit CreateAtomFromStream memory leakEPSS 0.8%CVE-2026-1173MEDIUMbirkir prime GraphQL Array Based Query Batch graphql denial of serviceEPSS 0.8%CVE-2025-8805MEDIUMOpen5GS SMF gsm-sm.c smf_gsm_state_wait_pfcp_deletion denial of serviceEPSS 0.8%CVE-2025-8799MEDIUMOpen5GS AMF npcf-build.c amf_nsmf_pdusession_build_create_sm_context denial of serviceEPSS 0.8%CVE-2025-8801MEDIUMOpen5GS AMF gmm-sm.c gmm_state_exception denial of serviceEPSS 0.8%CVE-2024-12002MEDIUMTenda FH451/FH1201/FH1202/FH1206 GetIPTV websReadEvent null pointer dereferenceEPSS 0.8%CVE-2024-3652MEDIUMIKEv1 default AH/ESP responder can cause libreswan to abort and restartEPSS 0.8%CVE-2022-31182MEDIUMCache poisoning via maliciously-formed request in DiscourseEPSS 0.8%CVE-2026-1174MEDIUMbirkir prime GraphQL Alias graphql resource consumptionEPSS 0.8%CVE-2024-11588MEDIUMAVL-DiTEST-DiagDev libdoip DoIPConnection.cpp reactOnReceivedTcpMessage null pointer dereferenceEPSS 0.8%CVE-2025-4533MEDIUMJeecgBoot Document Library Upload zip unzipFile resource consumptionEPSS 0.8%CVE-2022-35240HIGHBIG-IP Message Routing MQTT vulnerability CVE-2022-35240EPSS 0.8%CVE-2025-2959HIGHTRENDnet TEW-410APB HTTP Request httpd sub_4019A0 null pointer dereferenceEPSS 0.8%CVE-2025-2960HIGHTRENDnet TEW-637AP/TEW-638APB HTTP Request goahead sub_41DED0 null pointer dereferenceEPSS 0.8%