VYPR

CWE-772

Missing Release of Resource after Effective Lifetime

BaseDraftLikelihood: High

Description

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

Hierarchy (View 1000)

Related attack patterns (CAPEC)

CAPEC-469

CVEs mapped to this weakness (494)

page 10 of 25
  • CVE-2022-22155MedJan 19, 2022
    risk 0.42cvss 6.5epss 0.00

    An Uncontrolled Resource Consumption vulnerability in the handling of IPv6 neighbor state change events in Juniper Networks Junos OS allows an adjacent attacker to cause a memory leak in the Flexible PIC Concentrator (FPC) of an ACX5448 router. The continuous flapping of an IPv6…

  • CVE-2022-20023MedJan 4, 2022
    risk 0.42cvss 6.5epss 0.00

    In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMP_AU_rand packet. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

  • CVE-2021-29982MedAug 17, 2021
    risk 0.42cvss 6.5epss 0.01

    Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the potential leak of a single bit of memory. This vulnerability affects Firefox < 91 and Thunderbird < 91.

  • CVE-2021-21600MedAug 10, 2021
    risk 0.42cvss 6.5epss 0.01

    Dell EMC NetWorker, 19.4 or older, contain an uncontrolled resource consumption flaw in its API service. An authorized API user could potentially exploit this vulnerability via the web and desktop user interfaces, leading to denial of service in the manageability path.

  • CVE-2021-31919HigApr 30, 2021
    risk 0.42cvss 7.5epss 0.01

    An issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may contain uninitialized values of certain parts of a struct.

  • CVE-2021-22553MedFeb 17, 2021
    risk 0.42cvss 6.5epss 0.00

    Any git operation is passed through Jetty and a session is created. No expiry is set for the session and Jetty does not automatically dispose of the session. Over multiple git actions, this can lead to a heap memory exhaustion for Gerrit servers. We recommend upgrading Gerrit to…

  • CVE-2019-19956HigDec 24, 2019
    risk 0.42cvss 7.5epss 0.06

    xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.

  • CVE-2018-5739MedJan 16, 2019
    risk 0.42cvss 6.5epss 0.02

    An extension to hooks capabilities which debuted in Kea 1.4.0 introduced a memory leak for operators who are using certain hooks library facilities. In order to support multiple requests simultaneously, Kea 1.4 added a callout handle store but unfortunately the initial…

  • CVE-2018-20622MedDec 31, 2018
    risk 0.42cvss 6.5epss 0.03

    JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.

  • CVE-2018-20540MedDec 28, 2018
    risk 0.42cvss 6.5epss 0.01

    There is memory leak at liblas::Open (liblas/liblas.hpp) in libLAS 1.8.1.

  • CVE-2018-20408MedDec 23, 2018
    risk 0.42cvss 6.5epss 0.01

    An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_StdcFileByteStream::Create in System/StdC/Ap4StdCFileByteStream.cpp, as demonstrated by mp42hls.

  • CVE-2018-20407MedDec 23, 2018
    risk 0.42cvss 6.5epss 0.01

    An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as demonstrated by mp42hls.

  • CVE-2018-18897MedNov 2, 2018
    risk 0.42cvss 6.5epss 0.02

    An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.

  • CVE-2018-18544MedOct 21, 2018
    risk 0.42cvss 6.5epss 0.02

    There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31.

  • CVE-2018-18482MedOct 18, 2018
    risk 0.42cvss 6.5epss 0.01

    An issue was discovered in libpg_query 10-1.0.2. There is a memory leak in pg_query_raw_parse in pg_query_parse.c, which might lead to a denial of service.

  • CVE-2018-17967MedOct 3, 2018
    risk 0.42cvss 6.5epss 0.01

    ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c.

  • CVE-2018-17966MedOct 3, 2018
    risk 0.42cvss 6.5epss 0.02

    ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c.

  • CVE-2018-17965MedOct 3, 2018
    risk 0.42cvss 6.5epss 0.02

    ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c.

  • CVE-2018-17437MedSep 24, 2018
    risk 0.42cvss 6.5epss 0.01

    Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.

  • CVE-2018-17234MedSep 20, 2018
    risk 0.42cvss 6.5epss 0.01

    Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.