CWE-674: Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Also known as Stack Exhaustion.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the resource record-parsing...7.5 High
- bloq univalueUniValue::read() in UniValue before 1.0.5 allow attackers to cause a denial of service (the class...7.5 High
- gitlabGitLab 8.11 through 12.8.1 allows a Denial of Service when using several features to recursively...7.5 High
- cesnet libyangA stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union...6.5 Medium
- nasm netwide assemblerIn Netwide Assembler (NASM) 2.14.02, stack consumption occurs in expr# functions in asm/eval.c....5.5 Medium
- ezxml project ezxmlAn issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_ent_ok() mishandles...6.5 Medium
- sqlite, netapp cloud backup, ontap select deploy administration utility +6 more +8 morealter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types...5.5 Medium
- facebook mcrouterIn Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could...7.5 High
- imagemagickImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because...6.5 Medium
- 10up safe svgA Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for...7.5 High
- sass-lang libsassLibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator()(Sass::Binary_Expression*) in...6.5 Medium
- cujo smart firewall firmwareAn exploitable denial-of-service vulnerability exists in the mdnscap binary of the CUJO Smart...5.3 Medium
- gnu binutils, canonical ubuntu linux, opensuse leap +2 morefind_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as...6.5 Medium
- foxitsoftware foxit readerFoxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions...7.5 High
- foxitsoftware foxit readerFoxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions...7.5 High
- tcpdumpThe SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion.7.5 High
- tcpdumpThe BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print()...7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, canonical ubuntu linux +4 more +6 moreIn Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE...6.5 Medium
- oniguruma project oniguruma, canonical ubuntu linux, debian linux +1 more +3 moreOniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.7.5 High
- glyphandcog xpdfreaderXpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog:...5.5 Medium
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreIn DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate<TYPE>::sort) allows attackers...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 morecheck_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion,...5.5 Medium
- djangoproject django, opensuse leap +1 moreUncontrolled Recursion in Django7.5 High
- denx u-boot, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +9 more +11 moreA crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07...7.1 High
- mikrotik routerosMikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to stack exhaustion. By...6.5 Medium
- yaml-rustyaml-rust 0.4.0 and earlier is affected by: Uncontrolled Recursion. The impact is: Denial of...6.5 Medium
- serde yaml, serde-yaml project serde-yaml +1 moreserde serde_yaml 0.6.0 to 0.8.3 is affected by: Uncontrolled Recursion. The impact is: Denial of...6.5 Medium
- glyphandcog xpdfreaderIn Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a...5.5 Medium
- motorola cx2l mwr04l firmwareOn the Motorola router CX2L MWR04L 1.01, there is a stack consumption (infinite recursion) issue...7.5 High
- wireshark, canonical ubuntu linux, debian linux +13 more +15 moreIn Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could...7.5 High
- freeimage project freeimage, canonical ubuntu linux, debian linux +1 more +3 moreWhen FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp...6.5 Medium
- freeimage project freeimageWhen FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c...7.5 High
- ammonia project ammoniaUncontrolled recursion in ammonia7.5 High
- sass-lang libsassLibSass 3.5.4 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass:...6.5 Medium
- sass-lang libsassThe parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service ...6.5 Medium
- artifex mujsAn issue was discovered in Artifex MuJS 1.0.5. It has unlimited recursion because the match...7.5 High
- freedesktop poppler, fedoraproject fedora +1 moreFontInfoScanner::scanFonts in FontInfo.cc in Poppler 0.75.0 has infinite recursion, leading to a...6.5 Medium
- saitoha libsixelThe load_pnm function in frompnm.c in libsixel.a in libsixel 1.8.2 has infinite recursion.5.5 Medium
- graphvizAn issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption...6.5 Medium
- freedesktop popplerAn issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream:...8.8 High
- freedesktop popplerAn issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream:...8.8 High
- gnu glibc** DISPUTED ** In the GNU C Library (aka glibc or libc6) through 2.29,...7.5 High
- gnu glibc, netapp cloud backup, ontap select deploy administration utility +1 more +3 moreIn the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix...7.5 High
- exiv2An issue was discovered in Exiv2 0.27. There is infinite recursion at BigTiffImage::printIFD in...8.8 High
- exiv2An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image:...8.8 High
- gnu binutils, canonical ubuntu linux, netapp hci management node +1 more +3 moreAn issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack...5.5 Medium
- jenkins token macro, jenkins project token macro plugin, redhat openshift container platform +2 moreJenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS8.1 High
- juniper junos, juniper networks junos os, fedoraproject fedora +2 moreJunos OS: MX Series: uncontrolled recursion and crash in Broadband Edge subscriber management daemon (bbe-smgd).7.5 High
- westes flexAn issue was discovered in the function mark_beginning_as_normal in nfa.c in flex 2.6.4. There is...5.5 Medium
- yaml-cpp project yaml-cppAn issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack...6.5 Medium
- Show moreLoading…