Vulnerabilities > Missing Release of Resource after Effective Lifetime
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-19 | CVE-2024-53074 | Missing Release of Resource after Effective Lifetime vulnerability in Linux Kernel In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't leak a link on AP removal Release the link mapping resource in AP removal. | 5.5 |
| 2024-10-23 | CVE-2024-20481 | Missing Release of Resource after Effective Lifetime vulnerability in Cisco Firepower Threat Defense Software A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of the RAVPN service. This vulnerability is due to resource exhaustion. | 5.8 |
| 2024-10-23 | CVE-2024-20493 | Missing Release of Resource after Effective Lifetime vulnerability in Cisco Firepower Threat Defense Software A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to deny further VPN user authentications for several minutes, resulting in a temporary denial of service (DoS) condition. This vulnerability is due to ineffective handling of memory resources during the authentication process. | 5.3 |
| 2024-10-21 | CVE-2024-47733 | Missing Release of Resource after Effective Lifetime vulnerability in Linux Kernel In the Linux kernel, the following vulnerability has been resolved: netfs: Delete subtree of 'fs/netfs' when netfs module exits In netfs_init() or fscache_proc_init(), we create dentry under 'fs/netfs', but in netfs_exit(), we only delete the proc entry of 'fs/netfs' without deleting its subtree. | 5.5 |
| 2024-02-14 | CVE-2024-21789 | Missing Release of Resource after Effective Lifetime vulnerability in F5 products When a BIG-IP ASM/Advanced WAF security policy is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated | 7.5 |
| 2024-01-18 | CVE-2023-31274 | Missing Release of Resource after Effective Lifetime vulnerability in Aveva PI Server 2018/2023 AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory resulting in throttled processing of new PI Data Archive events and a partial denial-of-service condition. | 5.3 |
| 2024-01-02 | CVE-2023-47216 | Missing Release of Resource after Effective Lifetime vulnerability in Openatom Openharmony in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through occupy all resources | 5.5 |
| 2023-10-18 | CVE-2023-45814 | Missing Release of Resource after Effective Lifetime vulnerability in Littlebigfresh Bunkum 4.0 Bunkum is an open-source protocol-agnostic request server for custom game servers. | 5.3 |
| 2023-10-04 | CVE-2023-41094 | Missing Release of Resource after Effective Lifetime vulnerability in Silabs Emberznet TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing Release of Resource after Effective Lifetime may allow a device to be added outside of valid TouchLink range or pairing duration This issue affects Ember ZNet 7.1.x from 7.1.3 through 7.1.5; 7.2.x from 7.2.0 through 7.2.3; Version 7.3 and later are unaffected | 9.8 |
| 2023-02-28 | CVE-2023-22996 | Missing Release of Resource after Effective Lifetime vulnerability in Linux Kernel In the Linux kernel before 5.17.2, drivers/soc/qcom/qcom_aoss.c does not release an of_find_device_by_node reference after use, e.g., with put_device. | 5.5 |