CWE-772: Missing Release of Resource after Effective Lifetime
The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.
A kind of CWE-404 Improper Resource Shutdown or Release.
From the CWE List. © The MITRE Corporation.
Newest
- nlnet labs unboundDegradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries3.7 Low
- linux, linux kernel +1 morescsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues7.5 High
- emqx nanomqAn issue in EMQ NanoMQ v.0.24.9 allows a remote attacker to cause a denial of service via the...7.5 High
github.com/lin-snow/ech0GoEch0: ParseAcceptLanguage `_` separator bypass enables ~70x CPU amplification via Accept-Language header in i18n.Middleware8.7 High- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak5.9 Medium
- zephyrproject zephyrnet: Maliciously fragmented IPv6 packets can prevent receiving/processing future incoming packets7.5 High
- powerdns dnsdistDenial of service via IXFR queries5.3 Medium
- linux, linux kernel +1 moreBluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync5.5 Medium
- linux, linux kernel +1 moremm/hugetlb: restore reservation on error in hugetlb folio copy paths5.5 Medium
- bytecodealliance wasmtimeWasmtime: Leak in WASIp1 `fd_renumber` implementation2.3 Low
- linux, linux kernel +1 morepmdomain: core: Fix detach procedure for virtual devices in genpd5.5 Medium
- klever-io klever-goKlever-Go KVM: Throttler slot leak in trie account-data sync causes epoch bootstrap / state sync DoS5.9 Medium
- open-telemetry go.opentelemetry.io/otel/schema/v1.0, go.opentelemetry.io/otel/schema/v1.1, opentelemetry telemetry schema files +2 moreOpenTelemetry-Go's Schema ParseFile leaks file descriptors on each parse2.1 Low
- linux, linux kernel +1 moredrm/xe: Fix dma-buf attachment leak in xe_gem_prime_import()7.8 High
- linux, linux kernel +1 moreRDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()7.8 High
- tanium serverTanium addressed a denial of service vulnerability in Tanium Server.6.5 Medium
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +68 more +70 moreInvoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh9.1 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP Configuration utility vulnerability8.7 High
- codesys modbusImproper resource management in CODESYS Modbus TCP Server8.2 High
- linux, linux kernel +1 moredm: remove fake timeout to avoid leak request5.5 Medium
- nettyNetty: epoll transport denial of service via RST on half-closed TCP connection7.5 High
- linux, linux kernel +1 moremedia: cx88: Add missing unmap in snd_cx88_hw_params()5.5 Medium
- linux, linux kernel +1 morescsi: target: tcm_loop: Drain commands in target_reset handler5.5 Medium
- linux, linux kernel +1 moreBluetooth: purge error queues in socket destructors5.5 Medium
- isc bind, bind 9, red hat enterprise linux 10 +6 more +8 moreMemory leak in code preparing DNSSEC proofs of non-existence7.5 High
- linux, linux kernel +1 morebtrfs: fix reservation leak in some error paths when inserting inline extent7.5 High
- ultrajson, red hat openstack platform 16.2, openstack platform 17.1 +1 more +3 moreUltraJSON has a Memory Leak parsing large integers allows DoS7.5 High
- freebsdblocklistd(8) socket leak7.5 High
- eclipse jetty, red hat hawtio hawtio 4.4.0, openshift developer tools and services +35 more +37 moreThe Eclipse Jetty Server Artifact has a Gzip request memory leak7.5 High
- traefik, red hat openshift dev spaces 3.27 +1 moreTraefik: tcp router clears read deadlines before tls forwarding, enabling stalled handshakes (slowloris doS)7.5 High
- cisco secure firewall adaptive security appliance (asa) software, adaptive security appliance software +1 moreA vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall...8.6 High
- expressjs multer, red hat logging subsystem for red hat openshift, developer hub 1.8 +7 more +9 moreMulter vulnerable to Denial of Service via resource exhaustion8.7 High
- linux, linux kernel +1 moremm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single5.5 Medium
- linux, linux kernel +1 morescsi: qla2xxx: Free sp in error path to fix system crash5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morewifi: iwlwifi: mld: cancel mlo_scan_start_wk7.8 High
- grafana, grafana grafana/grafana, grafana/grafana-enterprise +5 more +7 moreUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out7.5 High
- red hat build of quarkus 3.27.2.redhat, jboss enterprise application platform 8, jboss enterprise application platform expansion pack +1 more +3 moreHibernate-reactive-core: hibernate reactive: denial of service due to connection leak on http client disconnect4.3 Medium
- linux, linux kernel +1 morenet: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts7.5 High
- zauberzeug niceguiNiceGUI has Redis connection leak via tab storage causes service degradation5.3 Medium
- jzeuzs thread-amountthread-amount is Vulnerable to Resource Exhaustion (Memory and Handle Leaks) on Windows and macOS8.7 High
- gallagher t21 readerMissing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an...2.4 Low
- zscaler client connectorHealth check port on ZCC allows tunnel bypass5.2 Medium
- flashmqFlashMQ does not release memory of queued QoS messages4.3 Medium
- ibm mqIBM MQ denial of service7.5 High
- bytecodealliance wasmtimeWasmtime has memory leak in C API with `externref` and `anyref` types1.0 Low
- linux, linux kernel +1 morewifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails5.5 Medium
- tenda ac6 v5.0, ac6 firmware +1 moreA denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5...8.6 High
- ibm db2IBM Db2 denial of service6.5 Medium
- gallagher t-series readersMissing Release of Resource after Effective Lifetime (CWE-772) in the Gallagher T-Series Reader...4.3 Medium
- amd versal adaptive soc devices, alveo v80 compute accelerator, platform loader and manager (plm) +6 more +8 moreIn AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post...3.2 Low
- Show moreLoading…