2324
Nature Type ID Name Page
MemberOf 700 Seven Pernicious Kingdoms 700 2557
MemberOf 978 SFP Secondary Cluster: Implementation 888 2408
HasMember 401 Missing Release of Memory after Effective Lifetime 700 973
HasMember 404 Improper Resource Shutdown or Release 700 980
HasMember 415 Double Free 700 1008
HasMember 416 Use After Free 700 1012
HasMember 457 Use of Uninitialized Variable 700 1094
HasMember 474 Use of Function with Inconsistent Implementations 700 1128
HasMember 475 Undefined Behavior for Input to API 700 1130
HasMember 476 NULL Pointer Dereference 700 1132
HasMember 477 Use of Obsolete Function 700 1138
References
[REF-6]Katrina Tsipenyuk, Brian Chess and Gary McGraw. "Seven Pernicious Kingdoms: A
Taxonomy of Software Security Errors". NIST Workshop on Software Security Assurance Tools
Techniques and Metrics. 2005 November 7. NIST. < https://samate.nist.gov/SSATTM_Content/
papers/Seven%20Pernicious%20Kingdoms%20-%20Taxonomy%20of%20Sw%20Security
%20Errors%20-%20Tsipenyuk%20-%20Chess%20-%20McGraw.pdf >.
Category-399: Resource Management Errors
Category ID : 399
Summary
Weaknesses in this category are related to improper management of system resources.
Membership
Nature Type ID Name Page
MemberOf 635 Weaknesses Originally Used by NVD from 2008 to 2016 635 2552
MemberOf 699 Software Development 699 2555
HasMember 73 External Control of File Name or Path 699 132
HasMember 403 Exposure of File Descriptor to Unintended Control
Sphere ('File Descriptor Leak')
699 978
HasMember 410 Insufficient Resource Pool 699 998
HasMember 470 Use of Externally-Controlled Input to Select Classes or
Code ('Unsafe Reflection')
699 1118
HasMember 502 Deserialization of Untrusted Data 699 1204
HasMember 619 Dangling Database Cursor ('Cursor Injection') 699 1382
HasMember 641 Improper Restriction of Names for Files and Other
Resources
699 1412
HasMember 694 Use of Multiple Resources with Duplicate Identifier 699 1523
HasMember 763 Release of Invalid Pointer or Reference 699 1599
HasMember 770 Allocation of Resources Without Limits or Throttling 699 1613
HasMember 771 Missing Reference to Active Allocated Resource 699 1622
HasMember 772 Missing Release of Resource after Effective Lifetime 699 1624
HasMember 826 Premature Release of Resource During Expected
Lifetime
699 1734
HasMember 908 Use of Uninitialized Resource 699 1792
HasMember 909 Missing Initialization of Resource 699 1797
CWE Version 4.14
CWE-411: Resource Locking Problems
CWE-411: Resource Locking Problems