Weaknesses of type CWE-772

107 results

Vazamento de recurso após fim de sua vida útil

Ocorre quando um programa aloca um recurso (memória, arquivo, conexão de banco de dados, socket) mas não o libera quando termina de usá-lo. O recurso fica ocupado indefinidamente, consumindo memória ou esgotando limites do sistema, levando a degradação de performance ou indisponibilidade da aplicação.

Example

Uma função abre uma conexão com banco de dados para buscar dados, mas nunca fecha a conexão após usar. Em uma aplicação web com múltiplas requisições, isso drena o pool de conexões até que novas requisições falham com 'too many connections'.

How to mitigate

Use sempre blocos try-finally ou estruturas de gerenciamento automático (como 'with' em Python, 'using' em C#) para garantir que recursos sejam liberados mesmo em caso de exceção. Em código legado, aplique code review focado em recursos não fechados e estabeleça padrões de cleanup obrigatórios.

CVE-2020-27351LOWVarious memory and file descriptor leaks in apt-pythonEPSS 0.4%CVE-2025-30256HIGHA denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted serieEPSS 0.4%CVE-2022-26354—A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing EPSS 0.4%CVE-2025-14969MEDIUMHibernate-reactive-core: hibernate reactive: denial of service due to connection leak on http client disconnectEPSS 0.4%CVE-2026-71380HIGHhttpd applies no timeout while receiving a request body, parking a worker on a stalled clientEPSS 0.4%CVE-2022-22155MEDIUMJunos OS: ACX5448: FPC memory leak due to IPv6 neighbor flapsEPSS 0.4%CVE-2026-92983HIGHInternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID MismatchEPSS 0.4%CVE-2026-18149MEDIUMundici vulnerable to Denial of Service via orphaned RetryHandler response bodyEPSS 0.4%CVE-2026-2261HIGHblocklistd(8) socket leakEPSS 0.4%CVE-2026-20124HIGHCisco IOS XE Software SNMP Denial of Service VulnerabilityEPSS 0.4%CVE-2026-35227HIGHImproper resource management in CODESYS Modbus TCP ServerEPSS 0.4%CVE-2025-65947HIGHthread-amount is Vulnerable to Resource Exhaustion (Memory and Handle Leaks) on Windows and macOSEPSS 0.3%CVE-2026-61387MEDIUMIn Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an uncheckeEPSS 0.3%CVE-2026-77384HIGHlibp2p: Circuit relay v2 server reservation refresh leaks abort listeners and allows remote resource exhaustionEPSS 0.3%CVE-2026-73508MEDIUMNetty: Memory Leak in DNS Record Decoder via Malformed Domain NamesEPSS 0.3%CVE-2026-73215HIGHThe coturn server can end in a state where it does not accept more requests with "even-port" enabled.EPSS 0.3%CVE-2026-59654MEDIUMApache CloudStack: DoS caused by database connections leakEPSS 0.3%CVE-2026-85718MEDIUMAsyncHttpClient: Connection permit leak on TLS handshake failure causes per-host denial of serviceEPSS 0.3%CVE-2025-62723MEDIUMFlashMQ does not release memory of queued QoS messagesEPSS 0.3%CVE-2026-49343MEDIUMKlever-Go KVM: Throttler slot leak in trie account-data sync causes epoch bootstrap / state sync DoSEPSS 0.3%