CWE-606: Unchecked Input for Loop Condition
The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.
A kind of CWE-1284 Improper Validation of Specified Quantity in Input.
From the CWE List. © The MITRE Corporation.
Newest
- progress software telerik document processing libraries Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing 7.5 High
- progressive robot ltd hmailserver Unchecked Input for Loop Condition in hMailServer 7.5 High
- wireshark Unchecked Input for Loop Condition in Wireshark 4.7 Medium
- temporal technologies, inc. server Temporal Server Schedule exclusion search can cause excessive CPU consumption 7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Poppler: poppler: unbounded cpu loop in splashoutputdev::tilingpatternfill via unvalidated tiling-pattern repeat count (denial of service) 5.5 Medium
- pegasystems pega infinity Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because… 8.8 High
- gnu wget Denial of Service in GNU wget 5.1 Medium
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +5 more +7 more .NET Denial of Service Vulnerability 7.5 High
- mermaid-js mermaid Mermaid radar diagrams are vulnerable to DoS 5.3 Medium
- cisco ios xe software, ios, ios xe +2 more Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability 8.6 High
- apache qpid proton-dotnet, apache software foundation qpid proton dotnet +1 more Apache Qpid Proton Dotnet: Unbounded disposition range handling can lead to denial of service 6.5 Medium
- apache qpid broker-j Apache Qpid Broker-J: Unbounded disposition range handling can lead to denial of service 6.5 Medium
- apache qpid proton-j Apache Qpid Proton-J: Unbounded disposition range handling can lead to denial of service 6.5 Medium
- loytec l-dali, l-gate, l-inx +5 more +7 more Loytec LINX firmware: Unchecked input for loop condition in the SNMP agent 6.6 Medium
- juniper junos, juniper networks junos os +1 more Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash 7.1 High
- wireshark Unchecked Input for Loop Condition in Wireshark 5.5 Medium
- python software foundation cpython tarfile opened in streaming mode mishandles EOF 8.2 High
- dana powers kafka-python, red hat quay 3.10, quay 3.12 +3 more +5 more kafka-python prior to 2.3.2 DoS via SCRAM Iteration Count in scram.py 8.7 High
- huawei harmonyos Logic bypass vulnerability in the file system. Impact: Successful exploitation of this... 2.4 Low
- go standard library crypto/x509, red hat assisted installer for red hat openshift container platform 2, cert manager support for red hat openshift release 1.19 +128 more +130 more Inefficient candidate hostname parsing in crypto/x509 6.5 Medium
- isc bind, bind 9 +1 more Unbounded resend loop in BIND 9 resolver 5.3 Medium
- palo alto networks prisma sd-wan ion, paloaltonetworks prisma sd-wan +1 more Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet 4.9 Medium
- protobufjs project protobufjs, protobufjs protobuf.js, red hat openshift pipelines +13 more +15 more protobufjs: Denial of service through unbounded protobuf recursion 7.5 High
- go standard library net/mail, golang go, red hat assisted installer for red hat openshift container platform 2 +107 more +109 more Quadratic string concatentation in consumeComment in net/mail 7.5 High
- go standard library net/http, golang go, http2 +106 more +108 more Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High
- kludex python-multipart, red hat exploit intelligence, openshift lightspeed +11 more +13 more Python-Multipart: Denial of Service via unbounded multipart part headers 7.5 High
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 more Apache Thrift: c_glib dispatch stack overflow 5.3 Medium
- digitalbazaar forge, red hat cluster observability operator 1.5.0, cryostat 4 +17 more +19 more Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input 7.5 High
- squirrelchat smol-toml smol-toml: Denial of Service via malformed TOML documents 8.2 High
- isc bind, bind 9, red hat enterprise linux 10 +25 more +27 more Excessive NSEC3 iterations cause high CPU load during insecure delegation validation 7.5 High
- pixarra liquid studio Liquid Studio 2.17 Denial of Service via Malformed Input 6.9 Medium
- sap se supply chain management Denial of service (DOS) in SAP Supply Chain Management 7.7 High
- sap supply chain management, advanced planning and optimization +1 more Denial of service (DOS) in SAP Supply Chain Management 7.7 High
- webpros plesk obsidian, red hat openshift dev spaces +1 more Plesk Obsidian versions 8.0.1 through 18.0.73 are vulnerable to a Denial of Service (DoS)... 7.5 High
- liferay dxp, portal, digital experience platform +2 more Liferay Portal has unchecked input for loop condition vulnerability in XML-RPC 6.9 Medium
- sap se business planning and consolidation Denial of Service (DoS) vulnerability in SAP Business Planning and Consolidation 6.5 Medium
- abb aspect-enterprise, matrix series, nexus series +2 more Authenticated Relative Path Traversal 7.5 High
- abb aspect-enterprise, matrix series, nexus series +2 more Authenticated Unchecked Loop Condition 5.9 Medium
- rt-labs p-net An Unchecked Input for Loop Condition in RT-Labs P-Net version 1.0.1 or earlier allows an... 5.3 Medium
- microsoft .net, .net 9.0, visual studio 2022 version 17.10 +5 more +7 more .NET and Visual Studio Denial of Service Vulnerability 7.5 High
- nlnet labs unbound, debian linux +1 more Unbounded name compression could lead to Denial of Service 5.3 Medium
- openssl Excessive time spent checking DSA keys and parameters 5.3 Medium
- facuet ryu Ryu Infinite Loop vulnerability 7.5 High
- katex KaTeX's maxExpand bypassed by Unicode sub/superscripts 6.5 Medium
- katex KaTeX's maxExpand bypassed by \edef 6.5 Medium
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem, sinec nms +2 more Excessive time spent checking invalid RSA public keys 5.9 Medium
- openssl, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +7 more +9 more Excessive time spent in DH check / generation with large Q parameter value 5.3 Medium
- openssl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more Excessive time spent checking DH q parameter value 5.3 Medium
- openssl, siemens sidis prime, simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 more Excessive time spent checking DH keys and parameters 5.3 Medium
- swift project swiftnio extras, apple swift-nio-extras +1 more SwiftNIO Extras vulnerable to improper detection of complete HTTP body decompression 7.5 High