CWE-772: Missing Release of Resource after Effective Lifetime
The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.
A kind of CWE-404 Improper Resource Shutdown or Release.
From the CWE List. © The MITRE Corporation.
Newest
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreIn the Linux kernel through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory...5.5 Medium
- huawei nip6800, secospace usg6600, usg9500 +3 more +5 moreHuawei products NIP6800;Secospace USG6600;USG9500 have a memory leak vulnerability. An attacker...4.9 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 morego7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not...5.5 Medium
- huawei cloudengine 12800, cloudengine 5800, cloudengine 6800 +6 more +8 moreCloudEngine 12800 products with versions of V200R019C00, V200R019C10SPC800, V200R019C00SPC600,...7.5 High
- freebsdIn FreeBSD 12.1-STABLE before r356908, 12.1-RELEASE before p5, 11.3-STABLE before r356908, and 11...7.4 High
- freebsdIn FreeBSD 12.1-STABLE before r360973, 12.1-RELEASE before p5, 11.4-STABLE before r360973, 11.4...5.5 Medium
- rio project rioUse after free in rio9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel before 5.6. svm_cpu_uninit in arch/x86/kvm/svm.c has...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces...4.7 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moregss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in...5.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +8 more +10 moreOn BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, when a virtual...7.5 High
- ibm mq, mq appliance +1 moreIBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial...5.3 Medium
- nanometrics centaur, titansma +1 moreNanometrics Centaur through 4.3.23 and TitanSMA through 4.2.20 mishandle access control for the...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) (Exynos7420 or...7.5 High
- tp-link archer c50TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a...7.5 High
- linux kernel, canonical ubuntu linux +1 moreThe Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of...5.5 Medium
- huawei nip6800, nip6800 firmware, secospace usg6600, usg9500 +2 more +4 moreHuawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and...7.5 High
- redhat lvm2vg_lookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad...2.3 Low
- cisco iosA memory leak vulnerability exists in Cisco IOS before 15.2(1)T due to a memory leak in the HTTP...7.5 High
- opensuse wickedAn ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows...7.5 High
- opensuse wicked, leap +1 moreAn ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network...7.5 High
- systemd project systemd, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreAn issue was discovered in button_open in login/logind-button.c in systemd before 243. When...2.4 Low
- gpacAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory...5.5 Medium
- gpac, debian linux +1 moreAn issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There are memory...5.5 Medium
- linux kernel, netapp 8300 firmware, 8700 firmware +11 more +13 moremwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1...5.5 Medium
- matio project matioA memory leak was discovered in Mat_VarCalloc in mat.c in matio 1.5.17 because SafeMulDims does...6.5 Medium
- saitoha libsixelA memory leak was discovered in image_buffer_resize in fromsixel.c in libsixel 1.8.4.6.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +12 more +14 morexmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related...7.5 High
- f5 big-ip, big-ip local traffic manager +1 moreOn BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12...7.5 High
- huawei cloudengine 12800, cloudengine 12800 firmware +1 moreCloudEngine 12800 has a DoS vulnerability. An attacker of a neighboring device sends a large...7.4 High
- qualcomm, inc. snapdragon mobile, snapdragon voice & music, qualcomm qcs405 firmware, sd 205 firmware +11 more +13 moreAn unprivileged application can allocate GPU memory by calling memory allocation ioctl function...5.5 Medium
- linux kernelIn the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB...2.4 Low
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, under certain...7.5 High
- intel ethernet 700 series software, ethernet controller 710-bm1 firmware, ethernet controller x710-at2 firmware +4 more +6 moreResource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may...5.5 Medium
- intel ethernet 700 series software, ethernet controller 710-bm1 firmware, ethernet controller x710-at2 firmware +4 more +6 moreResource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43...5.5 Medium
- rsyslog, debian linux, opensuse +2 moreA memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are...5.5 Medium
- rsyslog, debian linux, opensuse +2 moreA memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were...5.5 Medium
- rsyslog, debian linux, opensuse +2 moreA memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are...5.5 Medium
- php, php5, debian linux +1 more +3 morePHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which...7.5 High
- huawei ar120-s firmware, ar1200-s firmware, ar1200 firmware +13 more +15 moreSome Huawei products have a memory leak vulnerability when handling some messages. A remote...6.5 Medium
- [unknown] dpdk, dpdk data plane development kit, fedoraproject fedora +3 more +5 moreA flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before...7.5 High
- opensrcsec grsecurity, pax +1 moreAn exploitable vulnerability exists in the grsecurity PaX patch for the function read_kmem, in...5.9 Medium
- video converter project converterThe Video_Converter app 0.1.0 for Nextcloud allows denial of service (CPU and memory consumption)...7.7 High
- linux kernel, canonical ubuntu linux +1 moreIn the Linux kernel before 5.3.4, a reference count usage error in the fib6_rule_suppress()...7.8 High
- boaBoa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls...7.5 High
- gif2png project gif2pnglibpng 1.6.37 has memory leaks in png_malloc_warn and png_create_info_struct.6.5 Medium
- foxitsoftware readerFoxit Reader before 9.7 allows an Access Violation and crash if insufficient memory exists.7.5 High
- freerdp, opensuse leap +1 morelibfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks...7.5 High
- freerdp, lodev lodepng, opensuse leap +2 moreHuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in...7.5 High
- linux kernel, netapp aff a700s firmware, data availability services +14 more +16 moreIn the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device...7.5 High
- Show moreLoading…