Vulnerabilities > Missing Release of Resource after Effective Lifetime

DATE CVE VULNERABILITY TITLE RISK
2020-07-17 CVE-2020-1653 Missing Release of Resource after Effective Lifetime vulnerability in Juniper Junos
On Juniper Networks Junos OS devices, a stream of TCP packets sent to the Routing Engine (RE) may cause mbuf leak which can lead to Flexible PIC Concentrator (FPC) crash or the system to crash and restart (vmcore).
network
low complexity
juniper CWE-772
7.5
2020-05-29 CVE-2020-1870 Missing Release of Resource after Effective Lifetime vulnerability in Huawei products
There is a denial of service vulnerability in some Huawei products.
network
low complexity
huawei CWE-772
7.5
2020-05-13 CVE-2020-7455 Missing Release of Resource after Effective Lifetime vulnerability in Freebsd 11.3/11.4/12.1
In FreeBSD 12.1-STABLE before r360973, 12.1-RELEASE before p5, 11.4-STABLE before r360973, 11.4-BETA1 before p1 and 11.3-RELEASE before p9, the FTP packet handler in libalias incorrectly calculates some packet length allowing disclosure of small amounts of kernel (for kernel NAT) or natd process space (for userspace natd).
local
low complexity
freebsd CWE-772
5.5
2020-05-13 CVE-2019-15879 Missing Release of Resource after Effective Lifetime vulnerability in Freebsd 11.3/12.1
In FreeBSD 12.1-STABLE before r356908, 12.1-RELEASE before p5, 11.3-STABLE before r356908, and 11.3-RELEASE before p9, a race condition in the cryptodev module permitted a data structure in the kernel to be used after it was freed, allowing an unprivileged process can overwrite arbitrary kernel memory.
network
high complexity
freebsd CWE-772
7.4
2020-05-09 CVE-2019-20794 Missing Release of Resource after Effective Lifetime vulnerability in Linux Kernel
An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed.
local
high complexity
linux CWE-772
4.7
2020-04-24 CVE-2020-12134 Missing Release of Resource after Effective Lifetime vulnerability in Nanometrics Centaur and Titansma
Nanometrics Centaur through 4.3.23 and TitanSMA through 4.2.20 mishandle access control for the syslog log.
network
low complexity
nanometrics CWE-772
critical
9.8
2020-04-07 CVE-2017-18675 Missing Release of Resource after Effective Lifetime vulnerability in Google Android
An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) (Exynos7420 or Exynox8890 chipsets) software.
network
low complexity
google CWE-772
7.5
2020-03-25 CVE-2020-9375 Missing Release of Resource after Effective Lifetime vulnerability in Tp-Link Archer C50 Build170822/Build171227/Build200318
TP-Link Archer C50 V3 devices before Build 200318 Rel.
network
low complexity
tp-link CWE-772
7.5
2020-02-20 CVE-2011-2498 Missing Release of Resource after Effective Lifetime vulnerability in multiple products
The Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of service (memory consumption) by triggering creation of PTE pages.
local
low complexity
linux canonical CWE-772
5.5
2020-02-12 CVE-2011-4661 Missing Release of Resource after Effective Lifetime vulnerability in Cisco IOS
A memory leak vulnerability exists in Cisco IOS before 15.2(1)T due to a memory leak in the HTTP PROXY Server process (aka CSCtu52820), when configured with Cisco ISR Web Security with Cisco ScanSafe and User Authenticaiton NTLM configured.
network
low complexity
cisco CWE-772
7.5