Fallos del tipo CWE-404

748 resultados

Liberação ou encerramento inadequado de recursos

Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.

Ejemplo

Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.

Cómo mitigar

Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.

CVE-2026-54280LOWAIOHTTP: Payload Response Resources Are Not Closed After Mid-Body DisconnectEPSS 0.5%CVE-2026-12575HIGHDVP80ES3 Improper Resource Shutdown or Release VulnerabilityEPSS 0.5%CVE-2025-14953LOWOpen5GS FAR-ID handler.c ogs_pfcp_handle_create_pdr null pointer dereferenceEPSS 0.5%CVE-2024-27527HIGHwasm3 139076a is vulnerable to Denial of Service (DoS).EPSS 0.5%CVE-2026-8744MEDIUMOpen5GS NRF context.c ogs_sbi_nf_service_add denial of serviceEPSS 0.5%CVE-2022-28887MEDIUMMultiple Denial of Service VulnerabilityEPSS 0.4%CVE-2025-5031LOWAckites KillWxapkg wxapkg File Decompression resource consumptionEPSS 0.4%CVE-2024-4292MEDIUMContemporary Controls BASrouter BACnet BASRT-B Device-Communication-Control Service denial of serviceEPSS 0.4%CVE-2025-52982HIGHJunos OS: MX Series: When specific SIP packets are processed the MS-MPC will crashEPSS 0.4%CVE-2026-113872HIGHmulter vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardownEPSS 0.4%CVE-2026-15690LOWopen62541 Shared Client ua_client_connect.c responseReadNamespacesArray null pointer dereferenceEPSS 0.4%CVE-2025-41399HIGHSCTP VulnerabilityEPSS 0.4%CVE-2026-10069HIGHShibby Tomato miniupnpd resource consumptionEPSS 0.4%CVE-2026-4531MEDIUMFree5GC AMF handler.go HandleRegistrationComplete denial of serviceEPSS 0.4%CVE-2026-5661MEDIUMFree5GC NGSetupRequest denial of serviceEPSS 0.4%CVE-2022-48489—Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.EPSS 0.4%CVE-2022-48499HIGHConfiguration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.EPSS 0.4%CVE-2022-48500HIGHConfiguration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.EPSS 0.4%CVE-2026-2957MEDIUMqinming99 dst-admin File BackupController.java deleteBackup denial of serviceEPSS 0.4%CVE-2026-10650MEDIUMwarmcat libwebsockets SSH Protocol sshd.c lws_ssh_parse_plaintext resource consumptionEPSS 0.4%