CWE-674: Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Also known as Stack Exhaustion.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- jqlang jqjq: stack overflow in deep structural equality6.8 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morescsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()7.1 High
- sensiolabs symfonySymfony: [Yaml] Harden the parser when handling untrusted input8.2 High
- ibm iIBM i is Affected by a Denial of Service Vulnerability []6.5 Medium
- linux, linux kernel +1 morepowerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling5.5 Medium
- autodesk 3ds maxWRL File Parsing Memory Exhaustion in Autodesk 3ds Max5.5 Medium
postcss-selector-parsernpm,cargoRed Hat,clippyRed Hat +18 more +20 morepostcss-selector-parser AST Serialization container.js toString recursion5.3 Medium- sqlfluffSQLFluff: Recursive Stack Overflow in Parser7.5 High
- samsung escargotUncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation....5.5 Medium
- samsung escargotUncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Oversized Serialized...5.5 Medium
- imagemagickImageMagick: Stack overflow in fx operation6.2 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Policy Bypass in MNG coder could5.3 Medium
- mongodb php driverPHP Stack Exhaustion6.0 Medium
- givanz vvvebVvveb < 1.0.8.3 Uncontrolled Recursion Denial of Service7.1 High
- postgresqlPostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion7.5 High
- apache commons configurationApache Commons Configuration: StackOverflowError for YAML input with cycles5.3 Medium
- go-git go-billygo-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion6.5 Medium
- protobufjs project protobufjs, protobufjs protobuf.js +1 moreprotobufjs: Denial of Service via unbounded recursive JSON descriptor expansion5.3 Medium
- m2team nanazipNanaZip: Uncontrolled recursion in NanaZip UFS directory traversal causes stack exhaustion3.3 Low
- m2team nanazipNanaZip: Uncontrolled recursion in NanaZip Electron ASAR parser causes stack exhaustion3.3 Low
- protobufjs project protobufjs, protobufjs protobuf.js, red hat openshift pipelines +13 more +15 moreprotobufjs: Denial of service through unbounded protobuf recursion7.5 High
- zephyrproject zephyrnet: Stack Overflow with Ping (to own IP Address) via Shell6.1 Medium
- jqlang jqjq: Stack Overflow in Recursive Object Merge6.2 Medium
- jqlang jqjq: stack overflow in module loading on mutual `include`5.4 Medium
- jqlang jqjq: Stack overflow via unbounded recursion in jv_contains5.4 Medium
- govcert-lu eml parsereml_parser: Recursion DoS via nested message/rfc822 attachments6.3 Medium
- ipld go-ipld-primego-ipld-prime: DAG-CBOR and DAG-JSON decoders unbounded recursion depth6.2 Medium
ldap3_protocrates.ioldap3_proto has LDAP Filter stack exhaustion8.7 High- kanidmKanidm: Unauthenticated process abort via SCIM filter stack exhaustion8.7 High
- linux, linux kernel +1 moreksmbd: fix signededness bug in smb_direct_prepare_negotiation()9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morel2tp: Drop large packets with UDP encap5.5 Medium
- lix project lix, nixos nix +1 moreAn issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the...7.5 High
- freebsdpf can overflow the stack parsing crafted SCTP packets7.5 High
- wiresharkUncontrolled Recursion in Wireshark5.5 Medium
- wiresharkUncontrolled Recursion in Wireshark5.5 Medium
- wiresharkUncontrolled Recursion in Wireshark5.5 Medium
- wiresharkUncontrolled Recursion in Wireshark5.5 Medium
- wiresharkUncontrolled Recursion in Wireshark5.5 Medium
- wiresharkUncontrolled Recursion in Wireshark5.5 Medium
- apache thriftApache Thrift: Node.js skip() recursion8.7 High
- apache thrift, red hat multicluster global hub 1.3.4, multicluster global hub 1.4.5 +12 more +14 moreApache Thrift: c_glib dispatch stack overflow5.3 Medium
- zenmapNmap 7.70 Denial of Service via XML Entity Expansion6.9 Medium
- axios, red hat cryostat 4, gatekeeper 3 +61 more +63 moreAxios: unbounded recursion in toFormData causes DoS via deeply nested request data6.9 Medium
- marked project markedMarked: OOM Denial of Service via Infinite Recursion in marked Tokenizer8.7 High
- harttle liquidjsLiquidJS is vulnerable to Denial of Service via circular block reference in layout7.5 High
- xmldom, red hat build of podman desktop, developer hub 1.9 +6 more +8 morexmldom: Denial of service via uncontrolled recursion in XML serialization8.7 High
- ubuntu libefiboot, red hat enterprise linux 10, enterprise linux 7 +4 more +6 moreEfivar: efivar: denial of service due to stack overflow in device path node parsing5.5 Medium
- openbaoOpenBao has Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS)3.1 Low
Meridian.MappingNuGet,Meridian.MediatorNuGet +1 moreMeridian: Multiple defense-in-depth gaps (collection/depth caps, telemetry, retry, fan-out)7.5 High- chillicream graphql-platformHot Chocolate's Utf8GraphQLParser has Stack Overflow via Deeply Nested GraphQL Documents9.1 Critical
- Show moreLoading…