Resource Management Errors

Opis

Weaknesses in this category are related to improper management of system resources.

Wpisy w tej grupie

• CWE-73 External Control of File Name or Path
• CWE-403 Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')
• CWE-410 Insufficient Resource Pool
• CWE-470 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
• CWE-502 Deserialization of Untrusted Data
• CWE-619 Dangling Database Cursor ('Cursor Injection')
• CWE-641 Improper Restriction of Names for Files and Other Resources
• CWE-694 Use of Multiple Resources with Duplicate Identifier
• CWE-763 Release of Invalid Pointer or Reference
• CWE-770 Allocation of Resources Without Limits or Throttling
• CWE-771 Missing Reference to Active Allocated Resource
• CWE-772 Missing Release of Resource after Effective Lifetime
• CWE-826 Premature Release of Resource During Expected Lifetime
• CWE-908 Use of Uninitialized Resource
• CWE-909 Missing Initialization of Resource
• CWE-910 Use of Expired File Descriptor
• CWE-911 Improper Update of Reference Count
• CWE-914 Improper Control of Dynamically-Identified Variables
• CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes
• CWE-920 Improper Restriction of Power Consumption
• CWE-1188 Initialization of a Resource with an Insecure Default
• CWE-1341 Multiple Releases of Same Resource or Handle

Źródła