CWE-772Missing Release of Resource after Effective Lifetime

Description

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

Common consequences

• Availability→DoS: Resource Consumption (Other),DoS: Resource Consumption (Memory),DoS: Resource Consumption (CPU)
  An attacker that can influence the allocation of resources that are not properly released could deplete the available resource pool and prevent all other processes from accessing the same type of resource. Frequently-affected resources incl

Potential mitigations

• Requirements
  [object Object]
• Implementation
  It is good practice to be responsible for freeing all resources you allocate and to be consistent with how and where you free resources in a function. If you allocate resources that you intend to free upon completion of the function, you must be sure to free the resources at all exit points for that function including error conditions.
• Operation,Architecture and Design
  [object Object]

Related CWEs

Recent CVEs classified under this CWE