CWE-772 Missing Release of Resource after Effective Lifetime
baseThe product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (1029)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-20481US | medium5.8OT critical | KEV | ||
A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauth… | ||||
| CVE-2017-14495US | high7.5 | Exploit | ||
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption)… | ||||
| CVE-2003-0132US | medium5.0 | Exploit | ||
A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache to… | ||||
| CVE-2021-22883US | high7.5 | — | ||
Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This… | ||||
| CVE-2020-9375US | high7.5 | Exploit | ||
TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field. | ||||
| CVE-2017-1000408US | high7.8 | Exploit | ||
A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environment variable. Please note that many versions of glibc are not… | ||||
| CVE-2001-0830US | high7.5 | Exploit | ||
6tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which allows remote attackers to cause a denial of service (resource exhaustion) by repeat… | ||||
| CVE-2020-35876US | critical9.8 | — | ||
An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-after-free, or cause a… | ||||
| CVE-2017-15032US | critical9.8 | — | ||
ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c. | ||||
| CVE-2017-14138US | critical9.8 | — | ||
ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors. | ||||
| CVE-2017-11641US | critical9.8 | — | ||
GraphicsMagick 1.3.26 has a Memory Leak in the PersistCache function in magick/pixel_cache.c during writing of Magick Persistent Cache (MPC) files. | ||||
| CVE-2023-41094US | critical9.8 | — | ||
TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing Release of Resource after Effective Lifetime may allow a devic… | ||||
| CVE-2020-12134US | critical9.8 | — | ||
Nanometrics Centaur through 4.3.23 and TitanSMA through 4.2.20 mishandle access control for the syslog log. | ||||
| CVE-2017-9936US | medium6.5 | Exploit | ||
In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a remote denial of service attack. | ||||
| CVE-2017-12669US | high8.8 | — | ||
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteCALSImage in coders/cals.c. | ||||
| CVE-2017-12668US | high8.8 | — | ||
ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePCXImage in coders/pcx.c. | ||||
| CVE-2017-12666US | high8.8 | — | ||
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteINLINEImage in coders/inline.c. | ||||
| CVE-2017-12665US | high8.8 | — | ||
ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c. | ||||
| CVE-2017-12664US | high8.8 | — | ||
ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c. | ||||
| CVE-2017-12663US | high8.8 | — | ||
ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMAPImage in coders/map.c. | ||||
04
attack patterns (1)
CAPEC attack patterns that exploit this.
05
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan