Skip to content
OpenAdvisories

Weakness (CWE)

CWE-672: Operation on a Resource after Expiration or Release

Class Draft

The product uses, accesses, or otherwise operates on a resource after that resource has been expired, released, or revoked.

Source: MITRE CWE-672

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-33278

    Possible arbitrary code execution during DNSSEC validation

    NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execution as a result of deep copying a data structure and erroneously overwriting a destination p…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Critical 9.1
    CVE-2013-10075

    Apache::Session versions through 1.94 for Perl re-creates deleted sessions

    Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DB_File will create a session that does not exist. This can lead to sessions being revived, potentially wit…

    CHORNY Apache::Session libapache-session-perl libapache-session-perl Debian Ubuntu
  • Critical 9.4
    CVE-2019-17638 Public exploit EPSS 11%

    Operation on a Resource after Expiration or Release in Jetty Server

    In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the Byte…

    The Eclipse Foundation Eclipse Jetty jetty9 org.eclipse.jetty:jetty-server Debian Maven