cve.bz

CWE-771: Missing Reference to Active Allocated Resource

Filter

The product does not properly maintain a reference to a resource that has been allocated, which prevents the resource from being reclaimed.

What the weakness is: CWE-771 at MITRE. All weaknesses

Ask an AI about CWE-771

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-771: Missing Reference to Active Allocated Resource and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/771.html and https://cve.bz/cve/cwe/771?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2026-96325EPSS 1.1%

    Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.

  2. 7.5CVE-2026-3039EPSS 1.1%

    BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Ac…

  3. 7.4CVE-2026-20004EPSS 0.2%

    A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device. This vulnerability is due to improper management of memory resources du…

  4. 4.1CVE-2025-21090EPSS 0.2%

    Missing reference to active allocated resource for some Intel(R) Xeon(R) processors may allow an authenticated user to potentially enable denial of service via local access.

  5. 6.5CVE-2024-56343EPSS 0.4%

    IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request.

  6. 8.6CVE-2023-20244EPSS 1.0%

    A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an…

  7. 8.6CVE-2021-34720EPSS 1.3%

    A vulnerability in the IP Service Level Agreements (IP SLA) responder and Two-Way Active Measurement Protocol (TWAMP) features of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause device packet memory to become…