Fallos del tipo CWE-772

139 resultados

Falha em liberar recurso após seu ciclo de vida

Ocorre quando o código aloca um recurso (memória, arquivo, conexão, handle) mas não o libera adequadamente ao fim de seu uso. O recurso permanece consumido, esgotando gradualmente a capacidade do sistema — característica típica de vazamento de recursos. É perigoso porque leva a negação de serviço, travamento da aplicação ou consumo desenfreado de memória/descritores.

Ejemplo

Uma função abre uma conexão com banco de dados em caso de sucesso, mas quando ocorre uma exceção antes do `close()`, a conexão nunca é liberada. Em loops ou requisições frequentes, o pool de conexões se esgota e novas operações falham.

Cómo mitigar

Use padrões de garantia de limpeza: `try-finally`, `try-with-resources` (Java), context managers (Python), ou RAII em C++. Revise todo caminho de código (incluindo exceções e retornos antecipados) para garantir que cada recurso alocado tenha seu ponto de liberação correspondente.

CVE-2025-22891HIGHBIG-IP PEM VulnerabilityEPSS 0.4%CVE-2026-2261HIGHblocklistd(8) socket leakEPSS 0.4%CVE-2026-11811LOWSocket file-descriptor leak in UpdateHub OTA client start_coap_client() leading to resource-exhaustion DoSEPSS 0.4%CVE-2026-115793HIGHResource exhaustion from RPC sessions kept for requests to unknown interfaceEPSS 0.4%CVE-2020-27351LOWVarious memory and file descriptor leaks in apt-pythonEPSS 0.4%CVE-2025-30256HIGHA denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted serieEPSS 0.4%CVE-2022-26354—A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing EPSS 0.4%CVE-2025-65947HIGHthread-amount is Vulnerable to Resource Exhaustion (Memory and Handle Leaks) on Windows and macOSEPSS 0.4%CVE-2022-22155MEDIUMJunos OS: ACX5448: FPC memory leak due to IPv6 neighbor flapsEPSS 0.4%CVE-2026-41637LOWDegradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queriesEPSS 0.4%CVE-2026-54786LOWWasmtime: Leak in WASIp1 `fd_renumber` implementationEPSS 0.4%CVE-2026-56444MEDIUMDegradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configurationEPSS 0.4%CVE-2026-35227HIGHImproper resource management in CODESYS Modbus TCP ServerEPSS 0.4%CVE-2025-36071MEDIUMIBM Db2 denial of serviceEPSS 0.3%CVE-2026-15713MEDIUMLibsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leakEPSS 0.3%CVE-2026-72931MEDIUMWindows Secure Socket Tunneling Protocol (SSTP) Denial of Service VulnerabilityEPSS 0.3%CVE-2025-62723MEDIUMFlashMQ does not release memory of queued QoS messagesEPSS 0.3%CVE-2025-71268HIGHbtrfs: fix reservation leak in some error paths when inserting inline extentEPSS 0.3%CVE-2026-107834MEDIUMOWASP Coraza WAF: Resource exhaustion via deferred file handle accumulation in multipart body processorEPSS 0.3%CVE-2026-94651HIGHApache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse errorEPSS 0.3%