Fallos del tipo CWE-672

54 resultados

Operação em recurso após expiração ou liberação

A aplicação tenta usar um recurso (conexão, arquivo, memória, token, etc.) após ele ter sido liberado, expirado ou se tornado inválido. O código não verifica se o recurso ainda está disponível antes de acessá-lo, causando comportamentos imprevíveis: crash, corrupção de dados ou exploração de segurança.

Ejemplo

Um programa fecha uma conexão com banco de dados em uma thread, mas outra thread continua tentando executar queries usando a mesma conexão. Ou uma aplicação web usa um token de autenticação após seu tempo de expiração ter passado sem revalidar.

Cómo mitigar

Sempre valide o estado do recurso antes de usá-lo (check se está ativo, não expirou, não foi liberado). Use gerenciadores de recurso com escopo claro (finally, context managers em Python, try-with-resources em Java) e implemente timeouts com lógica de renewal para recursos sensíveis à expiração.

CVE-2020-11027MEDIUMPassword reset links invalidation issue in WordPressEPSS 13.6%CVE-2019-17638—In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produceEPSS 11.1%CVE-2021-37204HIGHA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versionEPSS 2.2%CVE-2021-42778—A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.EPSS 2.1%CVE-2020-12043—The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP service operating on the WEPSS 2.1%CVE-2021-37185HIGHA vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CEPSS 2.1%CVE-2019-15791HIGHReference count underflow in shiftfsEPSS 1.3%CVE-2026-33278CRITICALPossible arbitrary code execution during DNSSEC validationEPSS 1.3%CVE-2020-15270MEDIUMImproper session expiration in Parse ServerEPSS 1.2%CVE-2019-15794HIGHReference counting error in overlayfs/shiftfs error path when used in conjuction with aufsEPSS 1.2%CVE-2022-22197HIGHJunos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happeningEPSS 1.1%CVE-2022-30256HIGHAn issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution. A revoked domain nEPSS 0.9%CVE-2024-47571HIGHAn operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper accEPSS 0.9%CVE-2024-27308HIGHMio's tokens for named pipes may be delivered after deregistrationEPSS 0.9%CVE-2023-48220MEDIUMDecidim's devise_invitable gem vulnerable to circumvention of invitation token expiry periodEPSS 0.8%CVE-2023-1901MEDIUMHCI send_sync Dangling Semaphore Reference Re-useEPSS 0.6%CVE-2023-1902MEDIUMHCI Connection Creation Dangling State Reference Re-useEPSS 0.6%CVE-2022-22755HIGHBy using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within thEPSS 0.6%CVE-2026-58291MEDIUMMicrosoft Edge (Chromium-based) Information Disclosure VulnerabilityEPSS 0.6%CVE-2025-22149LOWJWK Set's HTTP client only overwrites and appends JWK to local cache during refreshEPSS 0.6%