CWE-674: Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Also known as Stack Exhaustion.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn (TBD) of (TBD), there is a possible out of bounds write due to kernel stack overflow. This...6.7 Medium
- graphql-rust juniperJuniper is vulnerable to @DOS GraphQL Nested Fragments overflow7.5 High
- go standard library encoding/gob, golang go +1 moreStack exhaustion when decoding certain messages in encoding/gob7.5 High
- go standard library encoding/xml, golang go +1 moreStack exhaustion when unmarshaling certain documents in encoding/xml7.5 High
- go standard library path/filepath, golang go +1 moreStack exhaustion on crafted paths in path/filepath7.5 High
- go standard library compress/gzip, golang go +1 moreStack exhaustion when reading certain archives in compress/gzip7.5 High
- go standard library io/fs, golang go +1 moreStack exhaustion in Glob on certain paths in io/fs7.5 High
- go standard library encoding/xml, golang go, fedoraproject fedora +1 more +3 moreStack exhaustion from deeply nested XML documents in encoding/xml7.5 High
- go standard library go/parser, golang go +1 moreStack exhaustion due to deeply nested types in go/parser5.5 Medium
- patriksimek vm2Sandbox Bypass8.3 High
- element-hq synapse, fedoraproject fedora +1 moreURL previews can crash Synapse media repositories or Synapse monoliths6.5 Medium
- vaporDoS Vulnerability in URLEncodedFormDecoder in Vapor7.5 High
- rulex-rs rulex, pomsky-lang pomsky +1 moreUncontrolled Recursion in rulex6.5 Medium
- artifex mujs, debian linux, fedoraproject fedora +2 morecompile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of...5.5 Medium
- vim, vim vim/vim +1 moreUncontrolled Recursion in vim/vim5.5 Medium
- fluxcd flux2, kustomize-controller +1 moreImproper path handling in Kustomization files allows for denial of service7.7 High
- golang go, fedoraproject fedora, netapp kubernetes monitoring operator +2 moreencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 High
- mediawiki, debian linux +1 moreAn issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37...4.4 Medium
- sap web dispatcher, netweaver, sap se netweaver (internet communication manager) +2 moreDue to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager,...7.5 High
- apache pinotPinot segment push endpoint has a vulnerability in unprotected environments7.5 High
- jerryscriptStack overflow vulnerability in Jerryscript before commit...9.8 Critical
- gnu gcc, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morelibiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as...5.5 Medium
- golang go, debian linux, netapp astra trident +2 moreregexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply...7.5 High
- envoyproxy envoyCrash when a cluster is deleted in Envoy4.4 Medium
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via...6.5 Medium
- google tensorflowStack overflow in Tensorflow7.5 High
- yzmcmsThe comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently,...5.3 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjs_json.c.7.8 High
- jsishJsish v3.5.0 was discovered to contain a stack overflow via Jsi_LogMsg at src/jsiUtils.c.5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a stack overflow via /usr/lib/x86_64-linux-gnu/libasan.so...5.5 Medium
- graph-gophers graphql-goDenial of Service in graphql-go6.5 Medium
- gnu gcc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust...5.5 Medium
- systemd, fedoraproject fedora, redhat enterprise linux +3 more +5 moreA flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial...5.5 Medium
- digitalbazaar forgeForge: Denial of service in TLS record processing via call stack exhaustion7.5 High
- hdfgroup hdf5A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 at at hdf5/src/H5Eint.c,...5.5 Medium
- apache log4j, apache software foundation log4j2, debian linux +114 more +116 moreApache Log4j2 does not always protect from infinite recursion in lookup evaluation5.9 Medium
- owasp modsecurity, debian linux, f5 nginx modsecurity waf +2 more +4 moreModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects...7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreUncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3...7.5 High
- nlnet labs routinatorInfinite length chain of RRDP repositories7.5 High
- lua, fedoraproject fedora +1 moreStack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform...5.5 Medium
- akka http serverUncontrolled Recursion in Akka HTTP7.5 High
- huawei harmonyosA component of the HarmonyOS has a External Control of System or Configuration Setting...5.5 Medium
- tuxera ntfs-3g, debian linux +1 moreA crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call...5.5 Medium
- exiv2A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers...6.5 Medium
- foxitsoftware pdf editor, pdf reader +1 moreAn issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows...7.5 High
- foxitsoftware foxit reader, phantompdf +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption...7.5 High
- elastic elasticsearch, oracle communications cloud native core automated test suite +1 moreDenial of Service in Elasticsearch6.5 Medium
- sciruby nmatrix, ublockorigin ublock origin, debian linux +1 more +3 moreuBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter...7.5 High
- linuxfoundation grpc swiftUncontrolled Recursion in HTTP2ToRawGRPCServerCodec7.5 High
- mikrotik routerosMikrotik RouterOs 6.44.5 (long-term tree) suffers from an stack exhaustion vulnerability in the ...6.5 Medium
- Show moreLoading…