Fallos del tipo CWE-404

695 resultados

Liberação ou encerramento inadequado de recursos

Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.

Ejemplo

Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.

Cómo mitigar

Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.

CVE-2022-40890HIGHA vulnerability in /src/amf/amf-context.c in Open5GS 2.4.10 and earlier leads to AMF denial of service.EPSS 0.9%CVE-2014-125066MEDIUMemmflo yuko-bot denial of serviceEPSS 0.9%CVE-2018-25087LOWArborator Server project.cgi start denial of serviceEPSS 0.9%CVE-2024-7887MEDIUMLimeSurvey File Upload index.php denial of serviceEPSS 0.9%CVE-2025-5935MEDIUMOpen5GS AMF/MME emm-sm.c common_register_state denial of serviceEPSS 0.9%CVE-2022-4565MEDIUMDromara HuTool cn.hutool.core.util.ZipUtil.java resource consumptionEPSS 0.9%CVE-2018-25062LOWflar2 ElementalX ipsec xfrm_user.c xfrm_dump_policy_done denial of serviceEPSS 0.9%CVE-2023-5462MEDIUMXINJE XD5E-30R-E Modbus denial of serviceEPSS 0.9%CVE-2017-20154LOWghostlander Phoenixcoin main.cpp accept denial of serviceEPSS 0.9%CVE-2023-0848MEDIUMNetgear WNDR3700v2 Web Management Interface denial of serviceEPSS 0.9%CVE-2023-5459MEDIUMDelta Electronics DVP32ES2 PLC Password Transmission denial of serviceEPSS 0.9%CVE-2022-3646LOWLinux Kernel BPF segment.c nilfs_attach_log_writer memory leakEPSS 0.9%CVE-2025-3167HIGHTenda AC23 API Interface VerAPIMant denial of serviceEPSS 0.9%CVE-2015-10025LOWluelista miniConf URL Scanning MessageView.cs denial of serviceEPSS 0.9%CVE-2023-2926MEDIUMSeaCMS Picture Upload member.php denial of serviceEPSS 0.9%CVE-2018-25098MEDIUMblockmason credit-protocol UCAC CreditProtocol.sol executeUcacTx denial of serviceEPSS 0.9%CVE-2010-10001MEDIUMShemes GrabIt NZB Date Parser denial of serviceEPSS 0.9%CVE-2023-0417MEDIUMMemory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafteEPSS 0.9%CVE-2023-0413MEDIUMDissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture fEPSS 0.9%CVE-2023-0415MEDIUMiSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture fEPSS 0.9%