Vulnerabilities > Improper Resource Shutdown or Release

DATE CVE VULNERABILITY TITLE RISK
2022-02-11 CVE-2022-23634 Improper Resource Shutdown or Release vulnerability in multiple products
Puma is a Ruby/Rack web server built for parallelism.
network
high complexity
puma rubyonrails debian fedoraproject CWE-404
5.9
2022-02-09 CVE-2021-41441 Improper Resource Shutdown or Release vulnerability in Dlink Dir-X1860 Firmware 1.03
A DoS attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to reboot the router via sending a specially crafted URL to an authenticated victim.
network
low complexity
dlink CWE-404
7.4
2022-01-25 CVE-2022-23010 Improper Resource Shutdown or Release vulnerability in F5 products
On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile and an HTTP profile are configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.
network
f5 CWE-404
7.1
2022-01-25 CVE-2022-23033 Improper Resource Shutdown or Release vulnerability in multiple products
arm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one or more entries from a guest p2m pagetable on Arm (p2m_remove_mapping, guest_physmap_remove_page, and p2m_set_entry with mfn set to INVALID_MFN) do not actually clear the pagetable entry if the entry doesn't have the valid bit set.
local
low complexity
xen fedoraproject debian CWE-404
7.8
2022-01-20 CVE-2021-46322 Improper Resource Shutdown or Release vulnerability in Duktape Project Duktape 2.99.99
Duktape v2.99.99 was discovered to contain a SEGV vulnerability via the component duk_push_tval in duktape/duk_api_stack.c.
4.3
2022-01-03 CVE-2021-45829 Improper Resource Shutdown or Release vulnerability in Hdfgroup Hdf5 1.13.11
HDF5 1.13.1-1 is affected by: segmentation fault, which causes a Denial of Service.
network
hdfgroup CWE-404
4.3
2022-01-01 CVE-2021-44717 Improper Resource Shutdown or Release vulnerability in multiple products
Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion.
network
high complexity
golang debian CWE-404
4.8
2021-12-15 CVE-2021-0984 Improper Resource Shutdown or Release vulnerability in Google Android 12.0
In onNullBinding of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service.
local
low complexity
google CWE-404
7.8
2021-12-13 CVE-2018-25021 Improper Resource Shutdown or Release vulnerability in Toktok Toxcore
The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker to exhaust the system's memory, causing a denial of service (DoS).
network
low complexity
toktok CWE-404
5.0
2021-11-26 CVE-2021-40833 Improper Resource Shutdown or Release vulnerability in F-Secure products
A vulnerability affecting F-Secure antivirus engine was discovered whereby unpacking UPX file can lead to denial-of-service.
network
f-secure CWE-404
4.3