CWE-772: Missing Release of Resource after Effective Lifetime, page 5
Filter
The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.
What the weakness is: CWE-772 at MITRE
Ask an AI about CWE-772
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-772: Missing Release of Resource after Effective Lifetime and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/772.html and https://cve.bz/cve/cwe/772?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.5CVE-2019-3883EPSS 8.2%
In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worker for at most 'ioblocktimeout' seconds. However this timeout applies only for un-encrypted requests. Connections using S…
- 7.5CVE-2019-3821EPSS 2.9%
A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled. An unauthenticated attacker could create multiple connections to ceph RADOS gateway to exhaust file descriptors for ceph-radosgw serv…
- 7.5CVE-2017-16232EPSS 5.4%
LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue
- 5.5CVE-2019-5671EPSS 0.3%
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the software does not release a resource after its effective lifetime has ended, which may lead to denial…
- 7.5CVE-2018-5739EPSS 1.9%
An extension to hooks capabilities which debuted in Kea 1.4.0 introduced a memory leak for operators who are using certain hooks library facilities. In order to support multiple requests simultaneously, Kea 1.4 added a callout handle store…
- 7.5CVE-2018-20657EPSS 4.0%
The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue…
- 6.5CVE-2018-20622EPSS 2.9%
JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
- 6.5CVE-2018-20540EPSS 1.5%
There is memory leak at liblas::Open (liblas/liblas.hpp) in libLAS 1.8.1.
- 6.5CVE-2018-20408EPSS 1.2%
An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_StdcFileByteStream::Create in System/StdC/Ap4StdCFileByteStream.cpp, as demonstrated by mp42hls.
- 6.5CVE-2018-20407EPSS 1.2%
An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as demonstrated by mp42hls.
- 5.5CVE-2018-20126EPSS 0.5%
hw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory leaks because errors are mishandled.
- 5.5CVE-2018-20123EPSS 0.5%
pvrdma_realize in hw/rdma/vmw/pvrdma_main.c in QEMU has a Memory leak after an initialisation error.
- 5.5CVE-2018-20002EPSS 1.8%
The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service (memory consumptio…
- 8.8CVE-2018-19760EPSS 1.1%
cfg_init in confuse.c in libConfuse 3.2.2 has a memory leak.
- 7.5CVE-2018-10851EPSS 6.0%
PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of s…
- 5.5CVE-2018-19213EPSS 0.8%
Netwide Assembler (NASM) through 2.14rc16 has memory leaks that may lead to DoS, related to nasm_malloc in nasmlib/malloc.c.
- 5.5CVE-2018-19139EPSS 1.7%
An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.
- 5.9CVE-2018-19132EPSS 5.9%
Squid before 4.4, when SNMP is enabled, allows a denial of service (Memory Leak) via an SNMP packet.
- 6.5CVE-2018-18897EPSS 2.0%
An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.
- 6.5CVE-2018-18544EPSS 2.0%
There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31.
- 6.5CVE-2018-18482EPSS 1.2%
An issue was discovered in libpg_query 10-1.0.2. There is a memory leak in pg_query_raw_parse in pg_query_parse.c, which might lead to a denial of service.
- 4.3CVE-2018-18443EPSS 2.1%
OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/IlmThreadPool.cpp, as demonstrated by exrmultiview.
- 7.5CVE-2018-18226EPSS 3.2%
In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach.
- 6.5CVE-2018-18016EPSS 1.8%
ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.
- 7.4CVE-2018-0471EPSS 0.8%
A vulnerability in the Cisco Discovery Protocol (CDP) module of Cisco IOS XE Software Releases 16.6.1 and 16.6.2 could allow an unauthenticated, adjacent attacker to cause a memory leak that may lead to a denial of service (DoS) condition.…
- 8.6CVE-2018-0421EPSS 3.5%
A vulnerability in TCP connection management in Cisco Prime Access Registrar could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition when the application unexpectedly restarts. The vulnerability is due …
- 6.5CVE-2018-17967EPSS 1.5%
ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c.
- 6.5CVE-2018-17966EPSS 1.7%
ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c.
- 6.5CVE-2018-17965EPSS 1.8%
ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c.
- 6.5CVE-2018-17437EPSS 1.3%
Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.
- 7.5CVE-2018-17332EPSS 1.2%
An issue was discovered in libsvg2 through 2012-10-19. The svgGetNextPathField function in svg_string.c returns its input pointer in certain circumstances, which might result in a memory leak caused by wasteful malloc calls.
- 6.5CVE-2018-17234EPSS 1.3%
Memory leak in the H5O__chunk_deserialize() function in H5Ocache.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.
- 5.3CVE-2018-3658EPSS 3.3%
Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access.
- 7.5CVE-2018-16807EPSS 1.4%
In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser.
- 6.5CVE-2018-16750EPSS 2.9%
In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found.
- 6.5CVE-2018-16641EPSS 2.0%
ImageMagick 7.0.8-6 has a memory leak vulnerability in the TIFFWritePhotoshopLayers function in coders/tiff.c.
- 6.5CVE-2018-16640EPSS 2.5%
ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c.
- 6.5CVE-2018-16548EPSS 1.9%
An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack.
- 5.5CVE-2018-6554EPSS 0.5%
Memory leak in the irda_bind function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users to cause a denial of service (memory consumption) by repeatedly binding an AF_IR…
- 6.5CVE-2018-10924EPSS 1.9%
It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine.
- 7.5CVE-2018-1999043EPSS 1.7%
A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in BasicAuthenticationFilter.java, BasicHeaderApiTokenAuthenticator.java that allows attackers to create ephemeral in-memory user records by attempt…
- 7.5CVE-2018-1000215EPSS 1.7%
Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS). This attack appear to be exploitable via If the attacker can force the data to be printed and the sys…
- 7.5CVE-2018-7994EPSS 1.0%
Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The soft…
- 7.5CVE-2018-5536EPSS 2.3%
A remote attacker via undisclosed measures, may be able to exploit an F5 BIG-IP APM 13.0.0-13.1.0.7 or 12.1.0-12.1.3.5 virtual server configured with an APM per-request policy object and cause a memory leak in the APM module.
- 6.5CVE-2018-14437EPSS 2.1%
ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c.
- 6.5CVE-2018-14436EPSS 2.1%
ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c.
- 6.5CVE-2018-14435EPSS 2.1%
ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c.
- 6.5CVE-2018-14434EPSS 2.8%
ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c.
- 7.5CVE-2018-14073EPSS 1.4%
libsixel 1.8.1 has a memory leak in sixel_allocator_new in allocator.c.
- 7.5CVE-2018-14072EPSS 1.4%
libsixel 1.8.1 has a memory leak in sixel_decoder_decode in decoder.c, image_buffer_resize in fromsixel.c, and sixel_decode_raw in fromsixel.c.