Vulnerabilities > Missing Release of Resource after Effective Lifetime

DATE CVE VULNERABILITY TITLE RISK
2022-04-15 CVE-2022-20697 Missing Release of Resource after Effective Lifetime vulnerability in Cisco IOS and IOS XE
A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition.
network
low complexity
cisco CWE-772
8.6
2022-04-04 CVE-2022-1100 Missing Release of Resource after Effective Lifetime vulnerability in Gitlab
A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 13.1 prior to 14.7.7, 14.8.0 prior to 14.8.5, and 14.9.0 prior to 14.9.2.
network
low complexity
gitlab CWE-772
4.3
2022-01-04 CVE-2022-20023 Missing Release of Resource after Effective Lifetime vulnerability in Google Android 10.0/11.0
In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMP_AU_rand packet.
low complexity
google CWE-772
6.5
2021-12-13 CVE-2021-40008 Missing Release of Resource after Effective Lifetime vulnerability in Huawei products
There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C00SPC800 and CloudEngine 7800 V200R019C00SPC800.
network
low complexity
huawei CWE-772
7.5
2021-11-08 CVE-2021-42075 Missing Release of Resource after Effective Lifetime vulnerability in Barrier Project Barrier
An issue was discovered in Barrier before 2.3.4.
network
low complexity
barrier-project CWE-772
7.5
2021-10-19 CVE-2021-31378 Missing Release of Resource after Effective Lifetime vulnerability in Juniper Junos
In broadband environments, including but not limited to Enhanced Subscriber Management, (CHAP, PPP, DHCP, etc.), on Juniper Networks Junos OS devices where RADIUS servers are configured for managing subscriber access and a subscriber is logged in and then requests to logout, the subscriber may be forced into a "Terminating" state by an attacker who is able to send spoofed messages appearing to originate from trusted RADIUS server(s) destined to the device in response to the subscriber's request.
network
low complexity
juniper CWE-772
7.5
2021-10-14 CVE-2021-42340 Missing Release of Resource after Effective Lifetime vulnerability in multiple products
The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak.
network
low complexity
apache netapp debian oracle CWE-772
7.5
2021-09-23 CVE-2021-1620 Missing Release of Resource after Effective Lifetime vulnerability in Cisco IOS
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) support for the AutoReconnect feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to exhaust the free IP addresses from the assigned local pool.
network
low complexity
cisco CWE-772
7.7
2021-09-08 CVE-2021-40797 Missing Release of Resource after Effective Lifetime vulnerability in Openstack Neutron
An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1.
network
low complexity
openstack CWE-772
6.5
2021-08-31 CVE-2021-34581 Missing Release of Resource after Effective Lifetime vulnerability in Wago products
Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device.
network
low complexity
wago CWE-772
7.5