cve.bz

CWE-772: Missing Release of Resource after Effective Lifetime, page 7

Filter

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

What the weakness is: CWE-772 at MITRE

Ask an AI about CWE-772

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-772: Missing Release of Resource after Effective Lifetime and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/772.html and https://cve.bz/cve/cwe/772?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2017-17162EPSS 0.2%

    Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R001C30SPC200, USG9500 V500R001C30SPC300 have a memory leak vulnerability due to m…

  2. 7.5CVE-2017-17153EPSS 0.9%

    IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001…

  3. 7.5CVE-2017-15349EPSS 0.9%

    Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C0…

  4. 5.3CVE-2017-15332EPSS 1.5%

    Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R00…

  5. 6.5CVE-2017-13234EPSS 0.6%

    In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak. This could lead to remote temporary denial of service with no additional execution privileges needed. User interaction is needed for exploitat…

  6. 7.5CVE-2017-12467EPSS 1.5%

    Memory leak in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory consumption) by leveraging failure to allocate memory for the comp or complen structure member.

  7. 7.5CVE-2017-12463EPSS 1.4%

    Memory leak in the ccnl_app_RX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory consumption) via vectors involving an envelope_s structure pointer when the packet forma…

  8. 7.8CVE-2017-1000408ExploitEPSS 1.5%

    A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2017-1000366.

  9. 6.5CVE-2018-6405EPSS 1.7%

    In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap, greenmap, and bluemap variable can be overwritten by a new pointer. The previous pointer is lost, which leads to a memory leak. This allows remote at…

  10. 7.5CVE-2017-15132EPSS 3.1%

    A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dovecot's auth client used by login processes. The leak has impact in high performance configuration where same login proce…

  11. 5.9CVE-2017-15094EPSS 3.3%

    An issue has been found in the DNSSEC parsing code of PowerDNS Recursor from 4.0.0 up to and including 4.0.6 leading to a memory leak when parsing specially crafted DNSSEC ECDSA keys. These keys are only parsed when validation is enabled b…

  12. 7.5CVE-2017-13196EPSS 2.2%

    In several places in ihevcd_decode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks. This could lead to a remote denial of service of a critical system process with no additional execution privileges nee…

  13. 7.5CVE-2017-0855EPSS 1.7%

    In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which could lead to memory leaks. This could lead to remote denial of service of a critical system process with no additional…

  14. 6.5CVE-2017-18029EPSS 4.2%

    In ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file.

  15. 6.5CVE-2017-18027EPSS 3.1%

    In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file.

  16. 6.5CVE-2018-5358EPSS 1.7%

    ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in coders/psd.c.

  17. 6.5CVE-2018-5357EPSS 3.7%

    ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function in coders/dcm.c.

  18. 7.8CVE-2017-15845EPSS 0.2%

    In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size (negative value) from user space can potentially lead to the memory leak or buffer overflow d…

  19. 6.5CVE-2018-5247EPSS 2.1%

    In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in coders/rla.c.

  20. 6.5CVE-2018-5246EPSS 3.7%

    In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c.

  21. 6.5CVE-2017-18022EPSS 2.7%

    In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c.

  22. 6.5CVE-2017-18008EPSS 2.6%

    In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c.

  23. 6.5CVE-2017-17934EPSS 2.5%

    ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls.

  24. 6.5CVE-2017-17887EPSS 1.4%

    In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a crafted MNG image file that is processed by ReadOneMNGImage.

  25. 6.5CVE-2017-17886EPSS 1.1%

    In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service via a crafted psd image file.

  26. 6.5CVE-2017-17885EPSS 1.4%

    In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to cause a denial of service via a crafted PICT image file.

  27. 6.5CVE-2017-17884EPSS 1.3%

    In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted PNG image file.

  28. 6.5CVE-2017-17883EPSS 1.1%

    In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c, which allows attackers to cause a denial of service via a crafted PGX image file.

  29. 6.5CVE-2017-17882EPSS 1.3%

    In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file.

  30. 6.5CVE-2017-17881EPSS 1.3%

    In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted MAT image file.

  31. 7.5CVE-2017-6135EPSS 1.6%

    In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, a slow memory leak as a result of undisclosed IPv4 or IPv6 packets sent to BIG-IP management port or self IP addresses may…

  32. 6.5CVE-2017-17680EPSS 2.6%

    In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file.

  33. 4.3CVE-2017-1283EPSS 0.9%

    IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a shared memory leak by MQ applications using dynamic queues, which can lead to lack of resources for other MQ applications. IBM X-Force ID: 125144.

  34. 6.5CVE-2017-8201EPSS 1.1%

    MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an a memory leak vulnerability in H323 protocol. An attacker logs in to the system as a user and send crafted packets to the affected products. Due to insufficient verif…

  35. 7.5CVE-2017-2700EPSS 0.9%

    AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes the device memory leaks, leading to DoS attacks.

  36. 6.5CVE-2017-12190EPSS 0.5%

    The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merg…

  37. 7.5CVE-2017-16892EPSS 1.2%

    In Bftpd before 4.7, there is a memory leak in the file rename function.

  38. 5.5CVE-2017-1000182EPSS 0.8%

    In SWFTools, a memory leak was found in wav2swf.

  39. 5.9CVE-2017-16672EPSS 4.7%

    An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. A memory leak occurs when an Asterisk pjsip session object is created and that call …

  40. 6.3CVE-2017-12278EPSS 1.6%

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Wireless LAN Controllers could allow an authenticated, remote attacker to cause an affected device to restart, resulting in a denial of service (DoS) condi…

  41. 5.7CVE-2017-13683EPSS 0.3%

    In Symantec Endpoint Encryption before SEE 11.1.3HF3, a kernel memory leak is a type of resource leak that can occur when a computer program incorrectly manages memory allocations in such a way that memory which is no longer needed is not …

  42. 5.7CVE-2017-13682EPSS 0.3%

    In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of resource leak that can occur when a computer program incorrectly manages memory allocations in such a way that memory which is no longer needed is n…

  43. 5.9CVE-2017-15671EPSS 1.4%

    The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when processing the ~ operator with a long user name, potentially leading to a denial of s…

  44. 6.5CVE-2017-15593EPSS 0.4%

    An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (memory leak) because reference counts are mishandled.

  45. 7.5CVE-2017-15268EPSS 4.3%

    Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c.

  46. 5.5CVE-2017-15225EPSS 1.4%

    _bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory leak) via a crafted ELF file.

  47. 7.5CVE-2017-15189EPSS 1.7%

    In Wireshark 2.4.0 to 2.4.1, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by adding decrements.

  48. 6.5CVE-2017-15218EPSS 2.2%

    ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png.c.

  49. 6.5CVE-2017-15217EPSS 2.0%

    ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c.

  50. 7.5CVE-2017-15033EPSS 1.7%

    ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.