CWE-772: Missing Release of Resource after Effective Lifetime
The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.
A kind of CWE-404 Improper Resource Shutdown or Release.
From the CWE List. © The MITRE Corporation.
Newest
- hackneyConnection pool exhaustion in hackney2.3 Low
- roderickvd pleezerpleezer allows resource exhaustion through uncollected hook script processes6.5 Medium
- jasonlovesdoggo abacusGoroutine Leak in Abacus SSE Implementation7.5 High
- f5 big-ip, big-ip policy enforcement manager +1 moreBIG-IP PEM Vulnerability8.7 High
- apple macosThis issue was addressed by improved management of object lifetimes. This issue is fixed in macOS...7.5 High
- linux, linux kernel +1 morewifi: iwlwifi: mvm: don't leak a link on AP removal5.5 Medium
- aio-libs aiohttp, aiohttp aio-libs +1 moreaiohttp memory leak when middleware is enabled when requesting a resource with a non-allowed method8.7 High
- openafsFileserver crash and possible information leak on StoreACL/FetchACL6.5 Medium
- agendaless waitressWaitress has a denial of service leading to high CPU usage/resource exhaustion7.5 High
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of...5.3 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance (asa) and firepower threat defense (ftd), adaptive security appliance software +2 more +4 moreA vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance ...5.8 Medium
- linux, linux kernel +1 morenetfs: Delete subtree of 'fs/netfs' when netfs module exits5.5 Medium
- linux, linux kernel +1 moredrm/amdgpu: fix calltrace warning in amddrm_buddy_fini5.5 Medium
- linux, linux kernel +1 moretools/power turbostat: Fix file pointer leak7.1 High
- apache answerApache Answer: The link for resetting user password is not Single-Use5.3 Medium
- apache answerApache Answer: The link to reset the user's password will remain valid after sending a new link5.3 Medium
- juniper junos os evolvedJunos OS Evolved: A high rate of SSH connections causes a Denial of Service8.7 High
- openvpnOpenVPN 2.6.10 and earlier in a server role accepts multiple exit notifications from...4.3 Medium
- linux, linux kernel +1 moreKVM: SVM: fix missing sev_decommission in sev_receive_start5.1 Medium
- linux, linux kernel +1 morenet:sfc: fix non-freed irq in legacy irq mode5.5 Medium
- debian linux, linux kernel +1 moreubifs: Set page uptodate in the correct place5.5 Medium
- red hat a-mq clients 2, ceq 3.2, cryostat 2 on rhel 8 +22 more +24 moreIo.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support5.4 Medium
- curl, apple macos, fedoraproject fedora +16 more +18 moreHTTP/2 push headers memory-leak8.6 High
- gallagher controller 7000Missing release of resource after effective lifetime (CWE-772) in the Controller 7000 resulted...6.2 Medium
- f5 big-ip, big-ip advanced web application firewall, big-ip application security manager +2 moreBIG-IP ASM and Advanced WAF vulnerability7.5 High
- aveva pi serverMissing Release of Resource after Effective Lifetime vulnerability in Aveva PI Server5.3 Medium
- openatom openharmonyLiteos-A has a missing release of resource vulnerability2.9 Low
- traefikDenial of service whith ACME HTTPChallenge in Traefik5.9 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA)...8.6 High
- littlebigfresh bunkumTokens cached in the AuthenticationService are susceptible to reuse in Bunkum5.3 Medium
- nettyNetty: Memory Leak in DNS Record Decoder via Malformed Domain Names5.3 Medium
- netty, red hat cryostat 4 on rhel 9, openshift serverless +24 more +26 morenetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion5.3 Medium
- netty, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, data grid 8.6.2 +7 more +9 moreNetty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator8.7 High
- nettyNetty: Unix-socket fd receive leaks descriptors when peer sends two at once4.0 Medium
- silicon labs ember znet, silabs emberznet +1 moreTouchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet10.0 Critical
- zoom meeting software development kit, video software development kit, zoom video communications, inc. sdk's +2 moreUncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to...7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: memory leak via ksmbd session setup request with unknown ntlmssp message type5.3 Medium
- wago 750-332, 750-362/xxx-xxx, 750-362\/000-001 firmware +26 more +28 moreWAGO: Series 750-3x/-8x prone to MODBUS server DoS7.5 High
- linux kernelIn the Linux kernel before 5.17.2, drivers/soc/qcom/qcom_aoss.c does not release an...5.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreBIG-IP HTTP profile vulnerability5.9 Medium
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreAn issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec...4.7 Medium
- golang text, golang.org/x/text golang.org/x/text/language +1 moreDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 High
- dell chengming 3900 firmware, cpg bios, inspiron 14 plus 7420 firmware +23 more +25 moreDell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability....2.3 Low
- samsung tizenrtAn issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security...7.5 High
- swftoolsSWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c.5.5 Medium
- monostream tifigtifig v0.2.2 was discovered to contain a memory leak via operator new[](unsigned long) at /asan...5.5 Medium
- cesanta mjsAn issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6)....5.5 Medium
- qpdf project qpdfQPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF:...6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: /var/run/<pid>.env files are potentially not deleted during termination of a gRPC connection causing inode exhaustion6.5 Medium
- siemens cp-8000 master module with i/o -25/+70°c, cp-8000 master module with i/o -40/+70°c, cp-8021 master module +4 more +6 moreA vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions <...7.5 High
- Show moreLoading…