CWE-773: Missing Reference to Active File Descriptor or Handle
CWE版本: 4.18
更新日期: 2025-09-09
弱点描述
The product does not properly maintain references to a file descriptor or handle, which prevents that file descriptor/handle from being reclaimed.
扩展描述
This can cause the product to consume all available file descriptors or handles, which can prevent other processes from performing critical file processing operations.
常见后果
影响范围: Availability
技术影响: DoS: Resource Consumption (Other)
说明: An attacker that can influence the allocation of resources that are not properly maintained could deplete the available resource pool and prevent all other processes from accessing the same type of resource.
潜在缓解措施
阶段: Operation Architecture and Design
策略: Resource Limitation
引入模式
| 阶段 | 说明 |
|---|---|
| Implementation | - |
分类映射
| 分类名称 | 条目ID | 条目名称 | 映射适配度 |
|---|---|---|---|
| CERT C Secure Coding | FIO42-C | Close files when they are no longer needed | CWE More Abstract |
| Software Fault Patterns | SFP14 | Failure to Release Resource | - |