CWE-674: Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Also known as Stack Exhaustion.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- nasm netwide assemblerAn issue was discovered in the function expr6 in eval.c in Netwide Assembler (NASM) through 2.14...5.5 Medium
- nasm netwide assemblerAn infinite recursion issue was discovered in eval.c in Netwide Assembler (NASM) through 2.14.02....5.5 Medium
- yaml-cpp project yaml-cppThe SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows...6.5 Medium
- artifex mupdfsvg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in...5.5 Medium
- gnu binutilsAn issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31....5.5 Medium
- trust-dns-proto project trust-dns-protoUncontrolled recursion in trust-dns-proto7.5 High
- qpdf project qpdfIn QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter::unparseObject and QPDFWriter::unparseChild...3.3 Low
serde_yamlcrates.ioUncontrolled recursion leads to abort in deserializationNo score- yaml-rust project yaml-rustUncontrolled recursion in rust-yaml7.5 High
- opensc project openscEndless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc...4.3 Medium
- mikrotik routerosMikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability. An...6.5 Medium
- eosio project eosEOSIO/eos eos version after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 contains a stack...9.8 Critical
- espruinoEspruino before 1.99 allows attackers to cause a denial of service (application crash) with a...5.5 Medium
- podofo project podofoAn issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree:...5.5 Medium
- apache orcApache ORC vulnerable to Uncontrolled Recursion7.5 High
- gnu binutilsAn issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30....5.5 Medium
- qpdf project qpdf, canonical ubuntu linux +1 morelibqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name...7.8 High
- gnu binutilsAn issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and...5.5 Medium
- openssl, canonical ubuntu linux, debian linux +2 moreConstructed ASN.1 types with a recursive definition could exceed the stack6.5 Medium
- artifex mupdf, debian linux +1 morepdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream...5.5 Medium
- artifex mujsjsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary...5.5 Medium
- gnu libtasn1, debian linux, fedoraproject fedora +2 moreAn issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1...7.5 High
- jqueryDenial of Service in jquery7.5 High
- exiv2In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image...5.5 Medium
- mqtt.js. mqtt.jsDenial of Service in mqtt6.5 Medium
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAn issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017...6.5 Medium
- exiv2There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image...5.5 Medium
- libsassThere is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval:...7.5 High
- libsassThere is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser...7.5 High
- libsassThere is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc)...7.5 High
- pcreIn PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion...7.5 High
- google androidA denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4...5.5 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause...7.5 High
- uclibcIn uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) in the...7.5 High
- wiresharkIn Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion (uncontrolled recursion)...5.5 Medium
- wiresharkIn Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in...5.5 Medium
- freedesktop popplerpoppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting...5.5 Medium
- virustotal yaralibyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of...7.5 High
- virustotal yaralibyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of...7.5 High
- microsoft malware protection engine, microsoft corporation malware protection, microsoft forefront security +1 more +3 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...5.5 Medium
- microsoft malware protection engine, forefront security, windows defender +2 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...5.5 Medium
- microsoft exchange server, microsoft corporation malware protection engine, microsoft endpoint protection +5 more +7 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...5.5 Medium
- microsoft exchange server, microsoft corporation malware protection engine, microsoft endpoint protection +5 more +7 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...5.5 Medium
- microsoft exchange server, microsoft corporation malware protection engine, microsoft endpoint protection +5 more +7 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...5.5 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an...6.5 Medium
- gstreamerThe gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in...7.5 High
- gnome libxml2, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not...7.5 High
- jansson project janssonJansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep...7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +11 more +13 moreThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery...7.5 High
- canonical ubuntu linux, debian linux, net-dns net\ +2 moreNet::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack...7.5 High
- Show moreLoading…