Fallos del tipo CWE-404
748 resultadosLiberação ou encerramento inadequado de recursos
Quando o software não libera corretamente recursos (conexões de banco, arquivo aberto, memória alocada, socket de rede) após o uso. O programa continua consumindo esses recursos até ficar sem espaço ou conexões disponíveis, causando falhas, lentidão ou negação de serviço.
Ejemplo
Um servidor web abre uma conexão com banco de dados para cada requisição, mas esquece de fechar a conexão quando termina. Após centenas de requisições, todas as conexões disponíveis estão esgotadas e novas requisições falham.
Cómo mitigar
Use padrões como try-with-resources (Java), context managers (Python), ou equivalentes na sua linguagem para garantir liberação automática. Implemente timeouts e monitore uso de recursos em produção para detectar vazamentos cedo.
CVE-2015-10025LOWluelista miniConf URL Scanning MessageView.cs denial of serviceEPSS 0.9%CVE-2025-3167HIGHTenda AC23 API Interface VerAPIMant denial of serviceEPSS 0.9%CVE-2025-15528MEDIUMOpen5GS GTPv2 Bearer Response denial of serviceEPSS 0.9%CVE-2023-20042MEDIUMA vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTEPSS 0.9%CVE-2018-25087LOWArborator Server project.cgi start denial of serviceEPSS 0.9%CVE-2024-7887MEDIUMLimeSurvey File Upload index.php denial of serviceEPSS 0.9%CVE-2023-0415MEDIUMiSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture fEPSS 0.9%CVE-2023-0417MEDIUMMemory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafteEPSS 0.9%CVE-2023-0413MEDIUMDissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture fEPSS 0.9%CVE-2023-0416MEDIUMGNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture filEPSS 0.9%CVE-2023-0848MEDIUMNetgear WNDR3700v2 Web Management Interface denial of serviceEPSS 0.9%CVE-2023-5324MEDIUMeeroOS Ethernet Interface denial of serviceEPSS 0.9%CVE-2025-1893MEDIUMOpen5GS AMF gmm-sm.c gmm_state_authentication denial of serviceEPSS 0.9%CVE-2024-57661HIGHAn issue in the sqlo_df component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQEPSS 0.9%CVE-2023-2926MEDIUMSeaCMS Picture Upload member.php denial of serviceEPSS 0.9%CVE-2018-25098MEDIUMblockmason credit-protocol UCAC CreditProtocol.sol executeUcacTx denial of serviceEPSS 0.9%CVE-2010-10001MEDIUMShemes GrabIt NZB Date Parser denial of serviceEPSS 0.9%CVE-2017-20186LOWnikooo777 ckSurf Spectator List Name misc.sp SpecListMenuDead denial of serviceEPSS 0.9%CVE-2024-55553HIGHIn FRRouting (FRR) before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the inteEPSS 0.8%CVE-2023-0414MEDIUMCrash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture fileEPSS 0.8%