Fallos del tipo CWE-404

695 resultados

Liberação ou encerramento inadequado de recursos

Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.

Ejemplo

Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.

Cómo mitigar

Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.

CVE-2026-1683MEDIUMFree5GC SMF PFCP handler.go HandlePfcpSessionReportRequest denial of serviceEPSS 0.7%CVE-2026-2062MEDIUMOpen5GS PGW S5U Address sgwc_sxa_handle_session_modification_response null pointer dereferenceEPSS 0.7%CVE-2023-20042MEDIUMA vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTEPSS 0.7%CVE-2025-6530MEDIUM70mai M300 Telnet Service demo.sh denial of serviceEPSS 0.6%CVE-2025-2591MEDIUMOpen Asset Import Library Assimp MDLLoader.cpp InternReadFile_Quake1 divide by zeroEPSS 0.6%CVE-2026-92417HIGHOpen5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereferenceEPSS 0.6%CVE-2025-1148LOWGNU Binutils ld ldelfgen.c link_order_scan memory leakEPSS 0.6%CVE-2026-59725HIGHSocket.IO: Engine.IO Polling Transport Connection ExhaustionEPSS 0.6%CVE-2026-8187MEDIUMOpen5GS UPF gtp-path.c _gtpv1_u_recv_cb resource consumptionEPSS 0.6%CVE-2022-2776MEDIUMSourceCodester Gym Management System delete_user.php denial of serviceEPSS 0.6%CVE-2026-2524MEDIUMOpen5GS MME mme_s11_handle_create_session_response denial of serviceEPSS 0.6%CVE-2025-20127HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 3100 and 4200 Series TLS Cipher Denial of Service VulnerabilityEPSS 0.6%CVE-2026-38641HIGHAn issue in the DSO::mmap_and_copy function of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via loading a crafteEPSS 0.6%CVE-2025-8802MEDIUMOpen5GS SMF smf-sm.c smf_state_operational denial of serviceEPSS 0.6%CVE-2026-13491MEDIUM78 xiaozhi-esp32 MQTT Goodbye mqtt_protocol.cc GetInstance denial of serviceEPSS 0.6%CVE-2025-3016MEDIUMOpen Asset Import Library Assimp MDL File MDLMaterialLoader.cpp ParseTextureColorData resource consumptionEPSS 0.6%CVE-2026-6607MEDIUMlm-sys fastchat Worker API Endpoint api_generate resource consumptionEPSS 0.6%CVE-2025-1846MEDIUMzj1983 zz File ZfileAction.java deleteLocalFile denial of serviceEPSS 0.6%CVE-2023-6180MEDIUMResource exhaustion via memory leak in tokio-boringEPSS 0.6%CVE-2025-1152LOWGNU Binutils ld xstrdup.c xstrdup memory leakEPSS 0.6%