Weaknesses of type CWE-772

136 results

Vazamento de recurso após fim de sua vida útil

Ocorre quando um programa aloca um recurso (memória, arquivo, conexão de banco de dados, socket) mas não o libera quando termina de usá-lo. O recurso fica ocupado indefinidamente, consumindo memória ou esgotando limites do sistema, levando a degradação de performance ou indisponibilidade da aplicação.

Example

Uma função abre uma conexão com banco de dados para buscar dados, mas nunca fecha a conexão após usar. Em uma aplicação web com múltiplas requisições, isso drena o pool de conexões até que novas requisições falham com 'too many connections'.

How to mitigate

Use sempre blocos try-finally ou estruturas de gerenciamento automático (como 'with' em Python, 'using' em C#) para garantir que recursos sejam liberados mesmo em caso de exceção. Em código legado, aplique code review focado em recursos não fechados e estabeleça padrões de cleanup obrigatórios.

CVE-2025-3864LOWConnection pool exhaustion in hackneyEPSS 0.9%CVE-2023-20095HIGHA vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTDEPSS 0.9%CVE-2021-21600MEDIUMDell EMC NetWorker, 19.4 or older, contain an uncontrolled resource consumption flaw in its API service. An authorized API user could potentEPSS 0.8%CVE-2023-36533HIGHUncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network accEPSS 0.8%CVE-2023-47124MEDIUMDenial of service whith ACME HTTPChallenge in TraefikEPSS 0.8%CVE-2026-48043MEDIUMnetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory ExhaustionEPSS 0.8%CVE-2026-1605HIGHIn Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with EPSS 0.7%CVE-2026-48006HIGHNetty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregatorEPSS 0.7%CVE-2026-2359HIGHMulter vulnerable to Denial of Service via resource exhaustionEPSS 0.7%CVE-2026-3104HIGHMemory leak in code preparing DNSSEC proofs of non-existenceEPSS 0.7%CVE-2026-40209MEDIUMDenial of service via IXFR queriesEPSS 0.7%CVE-2026-21720HIGHUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time outEPSS 0.7%CVE-2026-39830CRITICALInvoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/sshEPSS 0.7%CVE-2026-71380HIGHhttpd applies no timeout while receiving a request body, parking a worker on a stalled clientEPSS 0.7%CVE-2024-28882MEDIUMOpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the valiEPSS 0.7%CVE-2026-92983HIGHInternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID MismatchEPSS 0.7%CVE-2026-73508MEDIUMNetty: Memory Leak in DNS Record Decoder via Malformed Domain NamesEPSS 0.6%CVE-2026-61387MEDIUMIn Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an uncheckeEPSS 0.6%CVE-2026-26999HIGHTraefik: tcp router clears read deadlines before tls forwarding, enabling stalled handshakes (slowloris doS)EPSS 0.6%CVE-2026-77384HIGHlibp2p: Circuit relay v2 server reservation refresh leaks abort listeners and allows remote resource exhaustionEPSS 0.6%