CWE-771—Missing Reference to Active Allocated Resource

名称

Missing Reference to Active Allocated Resource

描述

The product does not properly maintain a reference to a resource that has been allocated, which prevents the resource from being reclaimed.

This does not necessarily apply in languages or frameworks that automatically perform garbage collection, since the removal of all references may act as a signal that the resource is ready to be reclaimed.

常见后果

范围：

Availability

影响：

DoS: Resource Consumption (Other)

注释：

An attacker that can influence the allocation of resources that are not properly maintained could deplete the available resource pool and prevent all other processes from accessing the same type of resource.

相关 CWE

• CWE-400Uncontrolled Resource ConsumptionHigh