Vulnerabilities > Improper Resource Shutdown or Release

DATE CVE VULNERABILITY TITLE RISK
2017-05-11 CVE-2017-7472 Improper Resource Shutdown or Release vulnerability in Linux Kernel
The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_set_reqkey_keyring calls.
local
low complexity
linux CWE-404
5.5
2017-04-23 CVE-2017-8071 Improper Resource Shutdown or Release vulnerability in Linux Kernel
drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without considering that sleeping is possible in a USB HID request callback, which allows local users to cause a denial of service (deadlock) via unspecified vectors.
local
low complexity
linux CWE-404
2.1
2017-04-17 CVE-2017-5650 Improper Resource Shutdown or Release vulnerability in Apache Tomcat
In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection that were currently waiting for a WINDOW_UPDATE before allowing the application to write more data.
network
low complexity
apache CWE-404
7.5
2017-03-20 CVE-2017-1145 Improper Resource Shutdown or Release vulnerability in IBM Websphere MQ 8.0.0.6
IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service through resource exhaustion.
network
low complexity
ibm CWE-404
7.8
2017-02-03 CVE-2016-8212 Improper Resource Shutdown or Release vulnerability in Dell Bsafe Crypto-J
An issue was discovered in EMC RSA BSAFE Crypto-J versions prior to 6.2.2.
network
low complexity
dell CWE-404
5.0
2015-04-24 CVE-2015-3415 Improper Resource Shutdown or Release vulnerability in multiple products
The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.
network
low complexity
apple debian canonical sqlite php CWE-404
7.5
2010-10-21 CVE-2010-4038 Improper Resource Shutdown OR Release vulnerability in Google Chrome
The Web Sockets implementation in Google Chrome before 7.0.517.41 does not properly handle a shutdown action, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
network
low complexity
google CWE-404
5.0