Fallos del tipo CWE-404

695 resultados

Liberação ou encerramento inadequado de recursos

Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.

Ejemplo

Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.

Cómo mitigar

Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.

CVE-2025-3198MEDIUMGNU Binutils objdump bucomm.c display_info memory leakEPSS 0.3%CVE-2024-2180MEDIUMZemana AntiLogger v2.74.204.664 - Kernel Memory LeakEPSS 0.3%CVE-2026-54280LOWAIOHTTP: Payload Response Resources Are Not Closed After Mid-Body DisconnectEPSS 0.3%CVE-2024-44201MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iPadOS 17.7.3, macOS Sequoia 15.1, mEPSS 0.3%CVE-2026-10156MEDIUMOpen5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumptionEPSS 0.3%CVE-2024-11097MEDIUMSourceCodester Student Record Management System Main Menu infinite loopEPSS 0.3%CVE-2026-6601MEDIUMLagom WHMCS Template Datatables resource consumptionEPSS 0.3%CVE-2026-7706MEDIUMOpen5GS AMF gmm-handler.c gmm_handle_service_request denial of serviceEPSS 0.3%CVE-2026-7708MEDIUMOpen5GS UDR subscription.c ogs_dbi_subscription_data denial of serviceEPSS 0.3%CVE-2026-7780MEDIUMOpen5GS smf-registrations Endpoint udm-sm.c udm_state_operational denial of serviceEPSS 0.3%CVE-2022-4981MEDIUMDCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereferenceEPSS 0.3%CVE-2024-21253LOWVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are PrioEPSS 0.3%CVE-2025-9396MEDIUMckolivas lrzip strtol_l.c __GI_____strtol_l_internal null pointer dereferenceEPSS 0.3%CVE-2022-3544LOWLinux Kernel Netfilter sysfs.c damon_sysfs_add_target memory leakEPSS 0.3%CVE-2022-3637LOWLinux Kernel BlueZ jlink.c jlink_init denial of serviceEPSS 0.3%CVE-2022-3543LOWLinux Kernel BPF af_unix.c unix_release_sock memory leakEPSS 0.3%CVE-2026-84425MEDIUMzhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of serviceEPSS 0.3%CVE-2026-7781MEDIUMOpen5GS amf-3gpp-access Endpoint nudm-handler.c udm_nudm_uecm_handle_amf_registration_update denial of serviceEPSS 0.3%CVE-2026-84427MEDIUMzhayujie CowAgent Bash Tool bash.py denial of serviceEPSS 0.3%CVE-2026-7583MEDIUMOpen5GS BSF context.c bsf_sess_find_by_ipv6prefix denial of serviceEPSS 0.3%