CWE-772 对已超过有效生命周期的资源丧失索引 类弱点 65 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-772属于资源管理缺陷，指程序在资源不再需要时未正确释放。攻击者常通过频繁创建资源耗尽系统内存或句柄，导致拒绝服务或系统崩溃。开发者应确保在资源生命周期结束时执行清理操作，使用RAII机制或显式调用释放函数，并加强代码审查以预防资源泄漏，从而保障系统稳定性。
private void processFile(string fName) { BufferReader fil = new BufferReader(new FileReader(fName)); String line; while ((line = fil.ReadLine()) != null) { processLine(line); } }private void processFile(string fName) { BufferReader fil = new BufferReader(new FileReader(fName)); String line; while ((line = fil.ReadLine()) != null) { processLine(line); } fil.Close(); }SqlConnection conn = new SqlConnection(connString); SqlCommand cmd = new SqlCommand(queryString); cmd.Connection = conn; conn.Open(); SqlDataReader rdr = cmd.ExecuteReader(); HarvestResults(rdr); conn.Connection.Close();| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-22891 | F5 BIG-IP PEM 安全漏洞 — BIG-IP | 7.5 | High | 2025-02-05 |
| CVE-2024-52303 | aiohttp 安全漏洞 — aiohttp | 5.9 | - | 2024-11-18 |
| CVE-2024-10396 | OpenAFS 安全漏洞 — OpenAFS | 6.5 | Medium | 2024-11-14 |
| CVE-2024-49769 | Waitress 安全漏洞 — waitress | 7.5 | High | 2024-10-29 |
| CVE-2024-20493 | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software | 5.3 | Medium | 2024-10-23 |
| CVE-2024-20481 | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software | 5.8 | Medium | 2024-10-23 |
| CVE-2024-41888 | Apache Answer 安全漏洞 — Apache Answer | 7.5AI | HighAI | 2024-08-09 |
| CVE-2024-41890 | Apache Answer 安全漏洞 — Apache Answer | 7.5AI | HighAI | 2024-08-09 |
| CVE-2024-39562 | Juniper Networks Junos OS Evolved 安全漏洞 — Junos OS Evolved | 7.5 | High | 2024-07-10 |
| CVE-2024-28882 | OpenVPN 安全漏洞 — OpenVPN | - | -AI | 2024-07-08 |
| CVE-2024-1300 | Eclipse Vert.x 安全漏洞 | 5.4 | Medium | 2024-04-02 |
| CVE-2024-22383 | Gallagher Controller 7000 安全漏洞 — Controller 7000 | 6.2 | Medium | 2024-03-05 |
| CVE-2024-21789 | F5 BIG-IP 安全漏洞 — BIG-IP | 7.5 | High | 2024-02-14 |
| CVE-2023-31274 | AVEVA PI Server 安全漏洞 — PI Server | 5.3 | Medium | 2024-01-18 |
| CVE-2023-47216 | OpenHarmony 安全漏洞 — OpenHarmony | 2.9 | Low | 2024-01-02 |
| CVE-2023-47124 | Containous Traefik 安全漏洞 — traefik | 5.9 | Medium | 2023-12-04 |
| CVE-2023-20095 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software | 8.6 | High | 2023-11-01 |
| CVE-2023-45814 | Bunkum 安全漏洞 — Bunkum | 5.3 | Medium | 2023-10-18 |
| CVE-2023-36533 | Zoom Client SDK 安全漏洞 — Zoom SDK's | 7.1 | High | 2023-08-08 |
| CVE-2023-1150 | wago 750-8xx 资源管理错误漏洞 — 750-332 | 7.5 | High | 2023-06-26 |
| CVE-2023-22302 | F5 BIG-IP 安全漏洞 — BIG-IP | 5.9 | Medium | 2023-02-01 |
| CVE-2022-29884 | Siemens SICAM A8000 CP-8000 资源管理错误漏洞 — CP-8000 MASTER MODULE WITH I/O -25/+70°C | 9.1 | - | 2022-07-12 |
| CVE-2022-28187 | NVIDIA GPU Display Driver 安全漏洞 — NVIDIA GPU Display Driver | 5.5 | Medium | 2022-05-17 |
| CVE-2022-26354 | QEMU 安全漏洞 — qemu-kvm | 6.7 | - | 2022-03-16 |
| CVE-2022-26353 | QEMU 安全漏洞 — qemu-kvm | 8.2 | - | 2022-03-16 |
| CVE-2021-31378 | Juniper Networks Junos OS 安全漏洞 — Junos OS | 6.8 | Medium | 2021-10-19 |
| CVE-2021-42340 | Apache Tomcat 资源管理错误漏洞 — Apache Tomcat | 7.5 | - | 2021-10-14 |
| CVE-2021-34581 | WAGO 安全漏洞 — 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 | 7.5 | High | 2021-08-31 |
| CVE-2021-1523 | Cisco Nexus 9000 Series Fabric Switches 输入验证错误漏洞 — Cisco NX-OS System Software in ACI Mode | 8.6 | High | 2021-08-25 |
| CVE-2021-21600 | Dell NetWorker 安全漏洞 — NetWorker | 6.5 | Medium | 2021-08-10 |
CWE-772（对已超过有效生命周期的资源丧失索引） 是常见的弱点类别，本平台收录该类弱点关联的 65 条 CVE 漏洞。