Fallos del tipo CWE-404
695 resultadosLiberação ou encerramento inadequado de recursos
Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.
Ejemplo
Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.
Cómo mitigar
Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.
CVE-2022-3684HIGHSDM600 endpoint vulnerability EPSS 0.6%CVE-2025-31237HIGHThis issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. MountinEPSS 0.6%CVE-2025-24811HIGHA vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 1211C DC/DC/DC (6ES7211EPSS 0.6%CVE-2024-9787MEDIUMContemporary Control System BASrouter BACnet BASRT-B UDP Packet denial of serviceEPSS 0.6%CVE-2025-1150LOWGNU Binutils ld libbfd.c bfd_malloc memory leakEPSS 0.6%CVE-2023-4882HIGHMultiple vulnerabilities in Open5GSEPSS 0.6%CVE-2025-1151LOWGNU Binutils ld xmemdup.c xmemdup memory leakEPSS 0.6%CVE-2025-3122LOWWebAssembly wabt binary-reader-interp.cc BeginFunctionBody null pointer dereferenceEPSS 0.6%CVE-2022-39368HIGHCalifornium Failing DTLS handshakes causes Data Loss due to throttling blocking processing of recordsEPSS 0.6%CVE-2022-3647LOWRedis Crash Report debug.c sigsegvHandler denial of serviceEPSS 0.6%CVE-2024-2995MEDIUMNUUO Camera deletefile.php denial of serviceEPSS 0.6%CVE-2025-8800MEDIUMOpen5GS AMF esm-handler.c esm_handle_pdn_connectivity_request denial of serviceEPSS 0.6%CVE-2025-8803MEDIUMOpen5GS AMF gmm-sm.c gmm_state_exception denial of serviceEPSS 0.6%CVE-2024-3764LOWTuya SDK MQTT Packet denial of serviceEPSS 0.6%CVE-2024-28252HIGHCoreWCF NetFraming based services can leave connections open when they should be closedEPSS 0.6%CVE-2025-1149LOWGNU Binutils ld xmalloc.c xstrdup memory leakEPSS 0.6%CVE-2022-3619LOWLinux Kernel Bluetooth l2cap_core.c l2cap_recv_acldata memory leakEPSS 0.6%CVE-2026-1171MEDIUMbirkir prime GraphQL Field graphql denial of serviceEPSS 0.6%CVE-2026-1172MEDIUMbirkir prime GraphQL Directive graphql denial of serviceEPSS 0.6%CVE-2024-31611CRITICALSeaCMS 12.9 has a file deletion vulnerability via admin_template.php.EPSS 0.6%