Weaknesses of type CWE-772

139 results

Vazamento de recurso após fim de sua vida útil

Ocorre quando um programa aloca um recurso (memória, arquivo, conexão de banco de dados, socket) mas não o libera quando termina de usá-lo. O recurso fica ocupado indefinidamente, consumindo memória ou esgotando limites do sistema, levando a degradação de performance ou indisponibilidade da aplicação.

Example

Uma função abre uma conexão com banco de dados para buscar dados, mas nunca fecha a conexão após usar. Em uma aplicação web com múltiplas requisições, isso drena o pool de conexões até que novas requisições falham com 'too many connections'.

How to mitigate

Use sempre blocos try-finally ou estruturas de gerenciamento automático (como 'with' em Python, 'using' em C#) para garantir que recursos sejam liberados mesmo em caso de exceção. Em código legado, aplique code review focado em recursos não fechados e estabeleça padrões de cleanup obrigatórios.

CVE-2025-22891HIGHBIG-IP PEM VulnerabilityEPSS 0.4%CVE-2026-2261HIGHblocklistd(8) socket leakEPSS 0.4%CVE-2026-11811LOWSocket file-descriptor leak in UpdateHub OTA client start_coap_client() leading to resource-exhaustion DoSEPSS 0.4%CVE-2026-115793HIGHResource exhaustion from RPC sessions kept for requests to unknown interfaceEPSS 0.4%CVE-2020-27351LOWVarious memory and file descriptor leaks in apt-pythonEPSS 0.4%CVE-2025-30256HIGHA denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted serieEPSS 0.4%CVE-2022-26354—A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing EPSS 0.4%CVE-2025-65947HIGHthread-amount is Vulnerable to Resource Exhaustion (Memory and Handle Leaks) on Windows and macOSEPSS 0.4%CVE-2022-22155MEDIUMJunos OS: ACX5448: FPC memory leak due to IPv6 neighbor flapsEPSS 0.4%CVE-2026-41637LOWDegradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queriesEPSS 0.4%CVE-2026-54786LOWWasmtime: Leak in WASIp1 `fd_renumber` implementationEPSS 0.4%CVE-2026-56444MEDIUMDegradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configurationEPSS 0.4%CVE-2026-35227HIGHImproper resource management in CODESYS Modbus TCP ServerEPSS 0.4%CVE-2025-36071MEDIUMIBM Db2 denial of serviceEPSS 0.3%CVE-2026-15713MEDIUMLibsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leakEPSS 0.3%CVE-2026-72931MEDIUMWindows Secure Socket Tunneling Protocol (SSTP) Denial of Service VulnerabilityEPSS 0.3%CVE-2025-62723MEDIUMFlashMQ does not release memory of queued QoS messagesEPSS 0.3%CVE-2025-71268HIGHbtrfs: fix reservation leak in some error paths when inserting inline extentEPSS 0.3%CVE-2026-107834MEDIUMOWASP Coraza WAF: Resource exhaustion via deferred file handle accumulation in multipart body processorEPSS 0.3%CVE-2026-94651HIGHApache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse errorEPSS 0.3%