562
ParentOf 460 Improper Cleanup on Thrown Exception 1102
ParentOf 568 finalize() Method Without super.finalize() 1290
Relevant to the view "Weaknesses for Simplified Mapping of Published
Vulnerabilities" (CWE-1003)
Nature Type ID Name Page
ChildOf 404 Improper Resource Shutdown or Release 980
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 452 Initialization and Cleanup Errors 2327
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Alternate Terms
Insufficient Cleanup :
Common Consequences
Scope Impact Likelihood
Other
Confidentiality
Integrity
Other
Read Application Data
Modify Application Data
DoS: Resource Consumption (Other)
It is possible to overflow the number of temporary files
because directories typically have limits on the number of
files allowed. This could create a denial of service problem.
Detection Methods
Automated Static Analysis
Automated static analysis, commonly referred to as Static Application Security Testing (SAST),
can find some instances of this weakness by analyzing source code (or binary/compiled code)
without having to execute it. Typically, this is done by building a model of data flow and control
flow, then searching for potentially-vulnerable patterns that connect "sources" (origins of input)
CWE Version 4.14
CWE-459: Incomplete Cleanup
CWE-459: Incomplete Cleanup