985
Nature Type ID Name Page
MemberOf 743 CERT C Secure Coding Standard (2008) Chapter 10 -
Input Output (FIO)
734 2347
MemberOf 752 2009 Top 25 - Risky Resource Management 750 2353
MemberOf 857 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 14 - Input Output (FIO)
844 2368
MemberOf 876 CERT C++ Secure Coding Section 08 - Memory
Management (MEM)
868 2376
MemberOf 877 CERT C++ Secure Coding Section 09 - Input Output
(FIO)
868 2377
MemberOf 882 CERT C++ Secure Coding Section 14 - Concurrency
(CON)
868 2380
MemberOf 982 SFP Secondary Cluster: Failure to Release Resource 888 2410
MemberOf 1003 Weaknesses for Simplified Mapping of Published
Vulnerabilities
1003 2576
MemberOf 1147 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 13. Input Output (FIO)
1133 2450
MemberOf 1162 SEI CERT C Coding Standard - Guidelines 08. Memory
Management (MEM)
1154 2458
MemberOf 1163 SEI CERT C Coding Standard - Guidelines 09. Input
Output (FIO)
1154 2459
MemberOf 1306 CISQ Quality Measures - Reliability 1305 2483
MemberOf 1308 CISQ Quality Measures - Security 1305 2485
MemberOf 1309 CISQ Quality Measures - Efficiency 1305 2486
MemberOf 1340 CISQ Data Protection Measures 1340 2590
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Notes
Relationship
Overlaps memory leaks, asymmetric resource consumption, malformed input errors.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Improper resource shutdown or release
7 Pernicious Kingdoms Unreleased Resource
OWASP Top Ten 2004 A9 CWE More Specific Denial of Service
CERT C Secure Coding FIO42-C CWE More
Abstract
Close files when they are no longer
needed
CERT C Secure Coding MEM31-
C
CWE More
Abstract
Free dynamically allocated memory
when no longer needed
The CERT Oracle Secure
Coding Standard for Java
(2011)
FIO04-J Release resources when they are no
longer needed
Software Fault Patterns SFP14 Failure to release resource
Related Attack Patterns
CAPEC-ID Attack Pattern Name
125 Flooding
130 Excessive Allocation
131 Resource Leak Exposure
494 TCP Fragmentation
495 UDP Fragmentation
CWE Version 4.14
CWE-405: Asymmetric Resource Consumption (Amplification)
CWE-405: Asymmetric Resource Consumption (Amplification)