1628
Reference Description
CVE-2009-2054 Product allows exhaustion of file descriptors when processing a large number
of TCP packets.
https://www.cve.org/CVERecord?id=CVE-2009-2054
CVE-2008-2122 Port scan triggers CPU consumption with processes that attempt to read data
from closed sockets.
https://www.cve.org/CVERecord?id=CVE-2008-2122
CVE-2007-4103 Product allows resource exhaustion via a large number of calls that do not
complete a 3-way handshake.
https://www.cve.org/CVERecord?id=CVE-2007-4103
CVE-2002-1372 Chain: Return values of file/socket operations are not checked (CWE-252),
allowing resultant consumption of file descriptors (CWE-772).
https://www.cve.org/CVERecord?id=CVE-2002-1372
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 808 2010 Top 25 - Weaknesses On the Cusp 800 2355
MemberOf 867 2011 Top 25 - Weaknesses On the Cusp 900 2372
MemberOf 882 CERT C++ Secure Coding Section 14 - Concurrency
(CON)
868 2380
MemberOf 884 CWE Cross-section 884 2567
MemberOf 982 SFP Secondary Cluster: Failure to Release Resource 888 2410
MemberOf 1129 CISQ Quality Measures (2016) - Reliability 1128 2440
MemberOf 1131 CISQ Quality Measures (2016) - Security 1128 2442
MemberOf 1162 SEI CERT C Coding Standard - Guidelines 08. Memory
Management (MEM)
1154 2458
MemberOf 1163 SEI CERT C Coding Standard - Guidelines 09. Input
Output (FIO)
1154 2459
MemberOf 1200 Weaknesses in the 2019 CWE Top 25 Most Dangerous
Software Errors
1200 2587
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Notes
Maintenance
"Resource exhaustion" (CWE-400) is currently treated as a weakness, although it is more like
a category of weaknesses that all have the same type of consequence. While this entry treats
CWE-400 as a parent in view 1000, the relationship is probably more appropriately described as
a chain.
Theoretical
Vulnerability theory is largely about how behaviors and resources interact. "Resource
exhaustion" can be regarded as either a consequence or an attack, depending on the
perspective. This entry is an attempt to reflect one of the underlying weaknesses that enable
these attacks (or consequences) to take place.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CERT C Secure Coding FIO42-C CWE More
Abstract
Close files when they are no longer
needed
CWE Version 4.14
CWE-773: Missing Reference to Active File Descriptor or Handle
CWE-773: Missing Reference to Active File Descriptor or Handle