CWE-772
Overview
- CWE ID
- 772
- CWE Name
- Missing Release of Resource after Effective Lifetime
- CWE Abstraction
- Base
- CWE structure
- Simple
- CWE Status
- Draft
Description
The software does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.
Extended Description
When a resource is not released after use, it can allow attackers to cause a denial of service by causing the allocation of resources without triggering their release. Frequently-affected resources include memory, CPU, disk space, power or battery, etc.