Fallos del tipo CWE-404

748 resultados

Liberação ou encerramento inadequado de recursos

Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.

Ejemplo

Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.

Cómo mitigar

Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.

CVE-2022-3553LOWX.org Server xquartz X11Controller.m denial of serviceEPSS 1.7%CVE-2023-1443MEDIUMFilseclab Twister Antivirus IoControlCode fildds.sys 0x80112053 denial of serviceEPSS 1.6%CVE-2019-0044HIGHJunos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interfaceEPSS 1.6%CVE-2019-0049HIGHJunos OS: RPD process crashes when BGP peer restartsEPSS 1.5%CVE-2023-34969MEDIUMD-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is usinEPSS 1.5%CVE-2025-4749HIGHD-Link DI-7003GV2 Factory Reset backup.asp sub_4983B0 denial of serviceEPSS 1.5%CVE-2017-11480—Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening fEPSS 1.4%CVE-2019-5636MEDIUMBeckhoff TwinCAT Discovery Service Denial of ServiceEPSS 1.4%CVE-2025-24160MEDIUMThe issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS SonoEPSS 1.4%CVE-2024-0263MEDIUMACME Ultra Mini HTTPd HTTP GET Request denial of serviceEPSS 1.4%CVE-2024-1017MEDIUMGabriels FTP Server denial of serviceEPSS 1.4%CVE-2024-0885MEDIUMSpyCamLizard HTTP GET Request denial of serviceEPSS 1.4%CVE-2024-0889MEDIUMKmint21 Golden FTP Server PASV Command denial of serviceEPSS 1.4%CVE-2024-0547MEDIUMAbility FTP Server APPE Command denial of serviceEPSS 1.4%CVE-2024-1016MEDIUMSolar FTP Server PASV Command denial of serviceEPSS 1.4%CVE-2024-0548MEDIUMFreeFloat FTP Server SIZE Command denial of serviceEPSS 1.3%CVE-2013-1054MEDIUMPossible remote DOS in WebAppsEPSS 1.3%CVE-2019-0043HIGHJunos OS: RPD process crashes upon receipt of a specific SNMP packetEPSS 1.3%CVE-2021-4432MEDIUMPCMan FTP Server USER Command denial of serviceEPSS 1.3%CVE-2024-0418MEDIUMiSharer and upRedSun File Sharing Wizard GET Request denial of serviceEPSS 1.3%