CWE-674: Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Also known as Stack Exhaustion.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- gnu binutils, netapp ontap select deploy administration utility +1 moreA flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed...7.5 High
- cesanta mjsStack overflow vulnerability in parse_equality Cesanta MJS 1.20.1, allows remote attackers to...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_shifts Cesanta MJS 1.20.1, allows remote attackers to cause...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_comparison Cesanta MJS 1.20.1, allows remote attackers to...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_statement_list Cesanta MJS 1.20.1, allows remote attackers...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_plus_minus Cesanta MJS 1.20.1, allows remote attackers to...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_block Cesanta MJS 1.20.1, allows remote attackers to cause...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_statement Cesanta MJS 1.20.1, allows remote attackers to...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_unary Cesanta MJS 1.20.1, allows remote attackers to cause...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_array Cesanta MJS 1.20.1, allows remote attackers to cause...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_mul_div_rem Cesanta MJS 1.20.1, allows remote attackers to...5.5 Medium
- cesanta mjsStack overflow vulnerability in parse_value Cesanta MJS 1.20.1, allows remote attackers to cause...5.5 Medium
- golang go, fedoraproject fedora +1 moregolang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion5.9 Medium
- podofo, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call in PdfNamesTree::AddToDictionary...5.5 Medium
- podofo, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray(),...5.5 Medium
- cesnet libyangA stack overflow in libyang <= v1.0.225 can cause a denial of service through function...7.5 High
- opcfoundation ua-.net-legacy, ua .net standard stack +1 moreOPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are...7.5 High
- unified-automation .net based opc ua client\/server sdkProducts with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and...7.5 High
- google tensorflowStack overflow in `ParseAttrValue` with nested tensors2.5 Low
- google tensorflowStack overflow due to looping TFLite subgraph7.3 High
- typo3, typo3 typo3.cms +1 moreDenial of Service in Page Error Handling5.9 Medium
- tianocore edk ii, edk2 +1 moreAn unlimited recursion in DxeCore in EDK II.7.8 High
- facebook hhvmThe fb_unserialize function did not impose a depth limit for nested deserialization. That meant a...7.5 High
- qemu, debian linux +1 moreA stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device...5.5 Medium
- ossecAn issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c...7.5 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. When they require assistance from the device model...5.5 Medium
- apple mac os x, macos, debian linux +22 more +24 morecurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...7.5 High
- lightbend play frameworkData Amplification in Play Framework7.5 High
- lightbend play frameworkUncontrolled Recursion in Play Framework7.5 High
- mit kerberos 5, fedoraproject fedora, netapp active iq unified manager +11 more +13 moreMIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via...7.5 High
- asterisk certified asterisk, sangoma asterisk, debian linux +1 more +3 moreAn issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x...6.5 Medium
- apple swift, swift 5.1.5 for linux +1 moreA stack overflow issue existed in Swift for Linux. The issue was addressed with improved input...7.5 High
- libproxy project libproxy, canonical ubuntu linux, debian linux +2 more +4 moreurl::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger...7.5 High
- dovecot, canonical ubuntu linux, debian linux +1 more +3 moreIn Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote...7.5 High
- huawei mate 30, mate 30 firmware +1 moreHUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a denial of service...5.5 Medium
- claws-mail, fedoraproject fedora +1 moreIn imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger...7.5 High
- schokokeks freewvsNested directory structure can lead to Uncontrolled Resource Consumption in freewvs2.8 Low
- xack dns, xack, inc. xack dns +1 moreXACK DNS 1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions...7.5 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption...7.5 High
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested...7.5 High
- qemu, canonical ubuntu linux, opensuse leap +2 moreati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via...6.0 Medium
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash....7.5 High
- powerdns recursor, debian linux, fedoraproject fedora +2 more +4 morePowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against...7.5 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack"...7.5 High
- gnome libcrocolibcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c,...7.1 High
- re2cre2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags.5.5 Medium
- openldap, apple mac os x, broadcom brocade fabric operating system +18 more +20 moreIn filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean...7.5 High
- red hat samba, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba...7.5 High
- flexera flexnet publisherA Denial of Service vulnerability related to stack exhaustion has been identified in FlexNet...7.5 High
- wireshark, debian linux, opensuse leap +2 moreIn Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could...7.5 High
- Show moreLoading…