CWE-771 Missing Reference to Active Allocated Resource
baseThe product does not properly maintain a reference to a resource that has been allocated, which prevents the resource from being reclaimed.
01
übergeordnete Schwächen
Übergeordnete Klassen, zu denen dies gehört.
02
untergeordnete Schwächen
Spezifischere Einträge unterhalb dieses.
03
Schwachstellen (19)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-20244US | high8.6 | — | ||
A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an unauthenticated, remote… | ||||
| CVE-2021-34720US | high8.6 | — | ||
A vulnerability in the IP Service Level Agreements (IP SLA) responder and Two-Way Active Measurement Protocol (TWAMP) features of Cisco IOS XR Software could allow an unauthenticat… | ||||
| CVE-2026-96325US | high7.5 | — | ||
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2024-56343US | medium6.5 | — | ||
IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request. | ||||
| CVE-2026-23347US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
can: usb: f81604: correctly anchor the urb in the read bulk callback
When submitting an urb, that is using the… | ||||
| CVE-2023-53306US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
fsdax: force clear dirty mark if CoW
XFS allows CoW on non-shared extents to combat fragmentation[1]. The old… | ||||
| CVE-2026-3039US | — | — | ||
BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constr… | ||||
| CVE-2026-20004US | — | — | ||
A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device.
This vulnera… | ||||
| CVE-2023-53858US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error
If clk_get_rate() fail… | ||||
| CVE-2023-53852US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
nvme-core: fix memory leak in dhchap_secret_store
Free dhchap_secret in nvme_ctrl_dhchap_secret_store() before… | ||||
| CVE-2023-53844US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/ttm: Don't leak a resource on swapout move error
If moving the bo to system for swapout failed, we were le… | ||||
| CVE-2022-50667US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl()
If the copy of the description string from userspace fa… | ||||
| CVE-2022-50664US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
media: dvb-frontends: fix leak of memory fw | ||||
| CVE-2022-50663US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
net: stmmac: fix possible memory leak in stmmac_dvr_probe()
The bitmap_free() should be called to free priv->a… | ||||
| CVE-2022-50658US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
cpufreq: qcom: fix memory leak in error path
If for some reason the speedbin length is incorrect, then there i… | ||||
| CVE-2023-53808US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
Always free the zeroed page on return from 'mwifiex… | ||||
| CVE-2025-40183US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
Cilium has a BPF egress gateway feature which forces ou… | ||||
| CVE-2025-40171US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
It’s possible for more than one async command to be in flig… | ||||
| CVE-2025-21090US | — | — | ||
Missing reference to active allocated resource for some Intel(R) Xeon(R) processors may allow an authenticated user to potentially enable denial of service via local access. | ||||
04
Quelle
Wo diese Definition veröffentlicht ist.
MITREUS
scry
Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan