| 名称 |
Resource Leak Exposure |
|
| 攻击可能性 |
典型严重性 |
| Medium |
Medium |
|
| 摘要 |
An adversary utilizes a resource leak on the target to deplete the quantity of the resource available to service legitimate requests. |
| 前置条件 |
The target must have a resource leak that the adversary can repeatedly trigger. |
| 解决方案 | If possible, leverage coding language(s) that do not allow this weakness to occur (e.g., Java, Ruby, and Python all perform automatic garbage collection that releases memory for objects that have been deallocated). Memory should always be allocated/freed using matching functions (e.g., malloc/free, new/delete, etc.) Implement best practices with respect to memory management, including the freeing of all allocated resources at all exit points and ensuring consistency with how and where memory is freed in a function. |
| 关联弱点 |
|
CWE 编号
|
描述
|
| CWE-404 |
Improper Resource Shutdown or Release |
|
| 分类体系：ATTACK |
|
条目编号
|
条目名称
|
| 1499 |
Endpoint Denial of Service |
|
| 分类体系：WASC |
|
条目编号
|
条目名称
|
| 10 |
Denial of Service |
|