CWE-775 (缺失文件描述符或句柄在有效生命周期之后的释放处理) — Vulnerability Class 3

CWE-775 represents a resource management weakness where software fails to release file descriptors or handles after they are no longer needed. This oversight typically occurs when developers neglect to explicitly close opened resources, leaving them allocated in the system memory. Attackers exploit this vulnerability by repeatedly opening files or connections without closing them, rapidly exhausting the available pool of descriptors. This resource exhaustion leads to a denial of service, as the system runs out of handles, preventing legitimate processes from accessing necessary files or network resources. To prevent this, developers must implement robust resource management practices, ensuring that every opened file descriptor or handle is explicitly closed in a finally block or through context managers. Regular code reviews and static analysis tools can also help identify these leaks, ensuring system stability and security against resource exhaustion attacks.