CyberSecBulletin

Missing Reference to Active Allocated Resource

CWE-771

The product does not properly maintain a reference to a resource that has been allocated, which prevents the resource from being reclaimed.

We track 3 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.8.

Latest Missing Reference to Active Allocated Resource vulnerabilities

  • 7.5 High severity

    BIND 9: Missing Reference to Active Allocated Resource

    CVE-2026-3039ISCEPSS 1.09%

    BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integra

  • 7.4 High severity

    Cisco IOS XE Software: Missing Reference to Active Allocated Resource

    CVE-2026-20004Cisco

    A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device. This vulnerability is due to improper management of memory resources during TLS connection setu

  • 8.6 High severity

    Cisco Firepower Threat Defense Software: Missing Reference to Active Allocated Resource

    CVE-2023-20244CiscoEPSS 1.04%

    A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. Thi