CWE-674: Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Also known as Stack Exhaustion.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- katexKaTeX's maxExpand bypassed by \edef6.5 Medium
- squid-cache squid, fedoraproject fedora, netapp bluexp +2 moreSQUID-2024:1 Denial of Service in HTTP Chunked Decoding8.6 High
- showdownjs showdownShowdownjs Denial of Service5.3 Medium
- ijl orjsonorjson does not limit recursion for deeply nested JSON documents7.5 High
- exiv2Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv25.5 Medium
- cosmwasm serde-json-wasmserde-json-wasm stack overflow during recursive JSON parsing3.2 Low
- surrealdbSurrealDB before 1.1.0 Uncontrolled Recursion Denial of Service7.1 High
- wiresharkLoop with Unreachable Exit Condition ('Infinite Loop') in Wireshark7.8 High
- wiresharkUncontrolled Recursion in Wireshark7.8 High
- wiresharkImproper Handling of Missing Values in Wireshark7.8 High
- kriszyp msgpackrConversion of property names to strings can trigger infinite recursion6.8 Medium
- squid-cache squidSQUID-2023:10 Denial of Service in HTTP Request parsing8.6 High
- dompdfDompdf possible DoS caused by infinite recursion when parsing SVG images5.3 Medium
- dompdf php-svg-libphp-svg-lib possible DoS caused by infinite recursion when parsing SVG document5.3 Medium
- siemens simatic s7-400 cpu 412-2 pn v7, simatic s7-400 cpu 414-3 pn/dp v7, simatic s7-400 cpu 414f-3 pn/dp v7 +15 more +17 moreA vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU...7.5 High
- johannschopplich nuxt-api-party, nuxt api party +1 moreDenial of service by abusing `fetchOptions.retry` in nuxt-api-party7.5 High
- remarshal-project remarshalRemarshal expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack7.5 High
- artifex mupdfMuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdf_mark_list_push...5.5 Medium
- wiresharkUncontrolled Recursion in Wireshark5.3 Medium
- xpdfreader xpdfAn infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02.5.5 Medium
- freedesktop poppler, debian linux +1 moreUncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause...7.5 High
- pythonThe legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger ...7.5 High
- fortra globalscape eft, globalscape eft server +1 moreFortra Globalscape Administration Server Denial of Service7.5 High
- hjson project hjsonhjson stack exhaustion vulnerability7.5 High
- telefonica brasil vivo play firmwareTelefnica Brasil Vivo Play (IPTV) Firmware: 2023.04.04.01.06.15 is vulnerable to Denial of...7.5 High
- xpdfStack overflow in Xpdf 4.04 due to object loop in PDF embedded file tree2.9 Low
- xpdfStack overflow in Xpdf 4.04 due to object loop in PDF page label tree2.9 Low
com.intuit.karate:karate-coreMavenKarate has vulnerable dependency on json-smart package (CVE-2023-1370)7.1 High- academysoftwarefoundation openimageioA denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO...7.5 High
- linux kernelAn issue was discovered in the Linux kernel before 5.8. lib/nlattr.c allows attackers to cause a...5.5 Medium
- jettisonInfinite recursion in Jettison leads to denial of service when creating a crafted JSONArray5.9 Medium
- json-smartStack exhaustion in json-smart leads to denial of service when parsing malformed JSON7.5 High
- moodleMoodle vulnerable to Uncontrolled Resource Consumption7.5 High
- dotcmsIn dotCMS 5.x-22.06, it is possible to call the TempResource multiple times, each time requesting...5.3 Medium
- powerdns recursorA remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS...7.5 High
- gpacGPAC MP4Box 2.1-DEV-rev649-ga8f438d20 has a segment fault (/stack overflow) due to infinite...5.5 Medium
- x-stream xstreamXStream Denial of Service via stack overflow8.2 High
- flavorjones loofahUncontrolled Recursion in Loofah7.5 High
- typo3TYPO3 subject to Uncontrolled Recursion resulting in Denial of Service5.9 Medium
- netty, debian linux +1 moreHAProxyMessageDecoder Stack Exhaustion DoS5.3 Medium
- joinmastodon mastodonMastodon through 4.0.2 allows attackers to cause a denial of service (large Sidekiq pull queue)...7.5 High
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for...6.5 Medium
- facebook hermesIt was possible to trigger an infinite recursion condition in the error handler when Hermes...7.5 High
- php, debian linux, fedoraproject fedora +2 morephar wrapper can occur dos when using quine gzip file2.3 Low
- jettison, debian linux +1 moreStack Buffer Overflow in Jettison6.5 Medium
- xpdfreader xpdfXPDF v4.04 was discovered to contain a stack overflow via the function Catalog::countPageTree()...5.5 Medium
- gpac, gpac gpac/gpac +1 moreUncontrolled Recursion in gpac/gpac5.3 Medium
- nintendo game boy color, game boy color firmware +1 moreNintendo Game Boy Color Mobile Adapter GB Tetsuji memory corruption5.0 Medium
- hjiang jsonxx, json\+\+ +1 moreStack overflow in Jsonxx5.9 Medium
- graphql-go project graphql-gographql-go has infinite recursion in the type definition parser7.5 High
- Show moreLoading…