CAPEC 131 Resource Leak Exposure

Description

🇬🇧 English Original 🇮🇹 Italiano AI Translated

An adversary utilizes a resource leak on the target to deplete the quantity of the resource available to service legitimate requests.

AI Generated Translation

Un adversary sfrutta una perdita di risorse sulla vittima per esaurire la quantità di risorse disponibili a gestire richieste legittime.

Mitigations

3

If Possible, Leverage Coding Language(S) That Do Not Allow This Weakness To Occur (E.G., Java, Ruby, And Python All Perform Automatic Garbage Collection That Releases Memory For Objects That Have Been Deallocated).

Implement Best Practices With Respect To Memory Management, Including The Freeing Of All Allocated Resources At All Exit Points And Ensuring Consistency With How And Where Memory Is Freed In A Function.

Memory Should Always Be Allocated/Freed Using Matching Functions (E.G., Malloc/Free, New/Delete, Etc.)

Consequences

Security Scopes Affected

Availability

Potential Impacts

Resource Consumption Unreliable Execution

Related ATT&CK Techniques

1

T1499

Endpoint Denial of Service

Adversaries may perform Endpoint Denial of Service (DoS) attacks to degrade or block the availability of services to users. Endpoint …

Resources Required

1

None: No specialized resources are required to execute this type of attack.