Falhas do tipo CWE-399

160 resultados

Erros na Gestão de Recursos

É uma categoria guarda-chuva que engloba falhas na alocação, liberação ou controle adequado de recursos do sistema (memória, arquivos, conexões, handles, etc.). O código aloca um recurso mas falha em devolvê-lo corretamente, deixando-o indisponível ou causando consumo descontrolado até esgotamento.

Exemplo

Uma aplicação abre conexões com banco de dados dentro de um try-catch, mas não as fecha no finally — após múltiplas requisições, todas as conexões disponíveis são consumidas e novas requisições falham. Ou um programa que aloca blocos de memória em loop sem nunca liberar, causando vazamento progressivo até travamento.

Como mitigar

Use mecanismos de limpeza automática: finally blocks ou try-with-resources em Java, context managers em Python, RAII em C++. Implemente monitoramento de recursos (alertas de vazamento), use pools de conexão com limites explícitos e realize testes de carga para detectar esgotamento.

CVE-2019-1799HIGHCisco Wireless LAN Controller Software IAPP Message Handling Denial of Service VulnerabilitiesEPSS 0.6%CVE-2018-0331—A vulnerability in the Cisco Discovery Protocol (formerly known as CDP) subsystem of devices running, or based on, Cisco NX-OS Software contEPSS 0.6%CVE-2019-1684MEDIUMCisco IP Phone 7800 and 8800 Series Cisco Discovery Protocol and Link Layer Discovery Protocol Denial of Service VulnerabilityEPSS 0.6%CVE-2023-29267MEDIUMIBM Db2 denial of serviceEPSS 0.6%CVE-2019-1800HIGHCisco Wireless LAN Controller Software IAPP Message Handling Denial of Service VulnerabilitiesEPSS 0.5%CVE-2019-1700MEDIUMCisco Firepower 9000 Series Firepower 2-Port 100G Double-Width Network Module Queue Wedge Denial of Service VulnerabilityEPSS 0.5%CVE-2020-3260HIGHCisco Aironet Series Access Points Client Packet Processing Denial of Service VulnerabilityEPSS 0.5%CVE-2018-15392—Cisco Industrial Network Director DHCP Request Processing Denial of Service VulnerabilityEPSS 0.4%CVE-2020-3334HIGHCisco Firepower 2100 Series Security Appliances ARP Denial of Service VulnerabilityEPSS 0.4%CVE-2024-20407MEDIUMA vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTDEPSS 0.4%CVE-2018-0088—A vulnerability in one of the diagnostic test CLI commands on Cisco Industrial Ethernet 4010 Series Switches running Cisco IOS Software coulEPSS 0.4%CVE-2024-58113MEDIUMVulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affeEPSS 0.4%CVE-2021-1621HIGHCisco IOS XE Software Interface Queue Wedge Denial of Service VulnerabilityEPSS 0.4%CVE-2021-34713HIGHCisco IOS XR Software for ASR 9000 Series Routers Denial of Service VulnerabilityEPSS 0.4%CVE-2021-1281MEDIUMCisco IOS XE SD-WAN Software Privilege Escalation VulnerabilityEPSS 0.3%CVE-2022-43381MEDIUMIBM AIX denial of service EPSS 0.2%CVE-2022-43380MEDIUMIBM AIX denial of serviceEPSS 0.2%CVE-2022-43382MEDIUMIBM AIX denial of serviceEPSS 0.2%CVE-2022-43855MEDIUMIBM SPSS Statistics denial of serviceEPSS 0.2%CVE-2026-41983MEDIUMNull pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability.EPSS 0.1%