CWE-772 · Denial of Service
Missing Release of Resource after Effective Lifetime
481CVEs
1exploited
0with a public check
6likely (EPSS 10%+)
SortMost likely exploited
481 CVEs with CWE-772 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-20481In CISA KEVExploitedA vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unaut…Cisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 5.8 · 2024-10-23 | 5.8 | 16% | 2024-10-23 |
| CVE-2003-0132A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache t…Apache · Http Server · 2003-04-03 | – | 87% | 2003-04-03 |
| CVE-2017-14495Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption)…Thekelleys · Dnsmasq · 2017-10-02 | – | 85% | 2017-10-02 |
| CVE-2024-2398HTTP/2 push headers memory-leakcurl · curl · CVSS 8.6 · 2024-03-27 | 8.6 | 36% | 2024-03-27 |
| CVE-2020-9375TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field.Tp-Link · Archer C50 · 2020-03-25 | – | 27% | 2020-03-25 |
| CVE-1999-1127Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of con…Microsoft · Windows Nt · 2002-03-09 | – | 18% | 2002-03-09 |
| CVE-2021-42340DoS via memory leak with WebSocket connectionsApache Software Foundation · Apache Tomcat · 2021-10-14 | – | 12% | 2021-10-14 |
| CVE-2019-3883In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worker for at most 'ioblocktimeout' seconds. However this timeout…Red Hat · 389-ds-base · CVSS 5.3 · 2019-04-17 | 5.3 | 8.2% | 2019-04-17 |
| CVE-2017-9936In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a remote denial of service attack.Libtiff · Libtiff · 2017-06-26 | – | 7.5% | 2017-06-26 |
| CVE-2015-7701Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).Ntp · Ntp · 2017-08-07 | – | 6.5% | 2017-08-07 |
| CVE-2017-5507Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service (memory consumption) via vectors involving a…Imagemagick · Imagemagick · 2017-03-24 | – | 6.0% | 2017-03-24 |
| CVE-2007-4103The IAX2 channel driver (chan_iax2) in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance Developer Kit before 0.6.0, when configured to allow unauthent…Digium · Asterisk · 2007-07-31 | – | 5.9% | 2007-07-31 |
| CVE-2018-19132Squid before 4.4, when SNMP is enabled, allows a denial of service (Memory Leak) via an SNMP packet.Squid-Cache · Squid · 2018-11-09 | – | 5.9% | 2018-11-09 |
| CVE-2001-08306tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which allows remote attackers to cause a denial of service (resource exhaustion) by repea…6tunnel Project · 6tunnel · 2002-03-09 | – | 5.7% | 2002-03-09 |
| CVE-2019-19956xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.Xmlsoft · Libxml2 · CVSS 7.5 · 2019-12-24 | 7.5 | 5.6% | 2019-12-24 |
| CVE-2017-16232LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_…Libtiff · Libtiff · 2019-03-17 | – | 5.4% | 2019-03-17 |
| CVE-2015-8631Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a de…Mit · Kerberos 5 · 2016-02-13 | – | 4.7% | 2016-02-13 |
| CVE-2017-16672An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. A memory leak occurs whe…Digium · Asterisk · 2017-11-09 | – | 4.7% | 2017-11-09 |
| CVE-2017-13748There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote denial of service attack.Jasper Project · Jasper · 2017-08-29 | – | 4.7% | 2017-08-29 |
| CVE-2015-6700The setBackground function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Ac…Adobe · Acrobat · 2015-10-14 | – | 4.7% | 2015-10-14 |
| CVE-2017-8309Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio c…Qemu · Qemu · 2017-05-23 | – | 4.5% | 2017-05-23 |
| CVE-2015-6697Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous bef…Adobe · Acrobat · 2015-10-14 | – | 4.4% | 2015-10-14 |
| CVE-2017-15268Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c.Qemu · Qemu · 2017-10-12 | – | 4.3% | 2017-10-12 |
| CVE-2017-18029In ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a cr…Imagemagick · Imagemagick · 2018-01-12 | – | 4.2% | 2018-01-12 |
| CVE-2017-10810Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c in the Linux kernel through 4.11.8 allows attackers to cause a denial of service (m…Linux · Linux Kernel · 2017-07-04 | – | 4.1% | 2017-07-04 |
| CVE-2018-20657The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memo…Gnu · Binutils · 2019-01-02 | – | 4.0% | 2019-01-02 |
| CVE-2009-2903Memory leak in the appletalk subsystem in the Linux kernel 2.4.x through 2.4.37.6 and 2.6.x through 2.6.31, when the appletalk and ipddp modules are loaded but the ipddp"N" device…Linux · Linux Kernel · 2009-09-15 | – | 3.8% | 2009-09-15 |
| CVE-2015-6704The animations property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Ac…Adobe · Acrobat · 2015-10-14 | – | 3.8% | 2015-10-14 |
| CVE-2015-6703The loadFlashMovie function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and A…Adobe · Acrobat · 2015-10-14 | – | 3.8% | 2015-10-14 |
| CVE-2015-6702The createSquareMesh function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and…Adobe · Acrobat · 2015-10-14 | – | 3.8% | 2015-10-14 |
| CVE-2015-6701The ambientIlluminationColor property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006…Adobe · Acrobat · 2015-10-14 | – | 3.8% | 2015-10-14 |
| CVE-2015-6699The addForegroundSprite function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat…Adobe · Acrobat · 2015-10-14 | – | 3.8% | 2015-10-14 |
| CVE-2018-13153In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c.Imagemagick · Imagemagick · 2018-07-05 | – | 3.8% | 2018-07-05 |
| CVE-2018-5357ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function in coders/dcm.c.Imagemagick · Imagemagick · 2018-01-12 | – | 3.7% | 2018-01-12 |
| CVE-2018-5246In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c.Imagemagick · Imagemagick · 2018-01-05 | – | 3.7% | 2018-01-05 |
| CVE-2007-0897Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consum…Clamav · Clamav · 2007-02-16 | – | 3.5% | 2007-02-16 |
| CVE-2018-5744A specially crafted packet can cause named to leak memoryISC · BIND 9 · CVSS 7.5 · 2019-10-09 | 7.5 | 3.4% | 2019-10-09 |
| CVE-2017-10981An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in fr_dhcp_decode()" and a denial of service.Freeradius · Freeradius · 2017-07-17 | – | 3.4% | 2017-07-17 |
| CVE-2017-10980An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decode_tlv()" and a denial of service.Freeradius · Freeradius · 2017-07-17 | – | 3.4% | 2017-07-17 |
| CVE-2018-3658Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial…Intel Corporation · Intel(R) Active Management Technology · 2018-09-12 | – | 3.3% | 2018-09-12 |
| CVE-2018-18226In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memo…Wireshark · Wireshark · 2018-10-12 | – | 3.2% | 2018-10-12 |
| CVE-2008-3799Memory leak in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (…Cisco · Ios · 2008-09-26 | – | 3.1% | 2008-09-26 |
| CVE-2010-4683Memory leak in Cisco IOS before 15.0(1)XA5 might allow remote attackers to cause a denial of service (memory consumption) by sending a crafted SIP REGISTER message over UDP, aka B…Cisco · Ios · 2011-01-07 | – | 3.1% | 2011-01-07 |
| CVE-2017-18027In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a cra…Imagemagick · Imagemagick · 2018-01-12 | – | 3.1% | 2018-01-12 |
| CVE-2021-30129DoS/OOM leak vulnerability in Apache Mina SSHD ServerApache Software Foundation · Apache Mina SSHD · 2021-07-12 | – | 3.0% | 2021-07-12 |
| CVE-2019-3821A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled. An unauthenticated attacker could create multiple connections to ceph RAD…Ceph · ceph · CVSS 7.5 · 2019-03-27 | 7.5 | 2.9% | 2019-03-27 |
| CVE-2018-16750In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found.Imagemagick · Imagemagick · 2018-09-09 | – | 2.9% | 2018-09-09 |
| CVE-2018-20622JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.Jasper Project · Jasper · CVSS 6.5 · 2018-12-31 | 6.5 | 2.9% | 2018-12-31 |
| CVE-2017-3812A vulnerability in the implementation of Common Industrial Protocol (CIP) functionality in Cisco Industrial Ethernet 2000 Series Switches could allow an unauthenticated, remote at…Cisco · Cisco Industrial Ethernet 2000 Switches 15.2(5.4.32i)E2 · 2017-02-03 | – | 2.8% | 2017-02-03 |
| CVE-2017-7943The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file.Imagemagick · Imagemagick · 2017-04-18 | – | 2.8% | 2017-04-18 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.