CWE-674: Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Also known as Stack Exhaustion.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- axiosaxios 0.28.0 before 1.18.0 Denial of Service via formDataToJSON6.3 Medium
- nlnetlabs net::dnsNet::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains7.5 High
- linux, linux kernel +1 morehwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX5.5 Medium
- linux, linux kernel +1 morenet/sched: act_mirred: Fix blockcast recursion bypass leading to stack overflow5.5 Medium
- linux, linux kernel +1 morethunderbolt: property: Cap recursion depth in __tb_property_parse_dir()5.5 Medium
- linux, linux kernel +1 morenfsd: fix dead ACL conflict guard in nfsd4_create7.5 High
- elixir-protobuf protobufElixir protobuf: Unbounded recursion depth in embedded-message decoding8.2 High
- busyboxA heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers...2.9 Low
- busyboxA stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows...2.9 Low
- apache software foundation iotdbApache IoTDB: Unauthenticated unbounded recursion in IoTDB AirGap receiver's E-language prefix parser causes per-connection StackOverflowError7.5 High
trapsterPyPITrapster Community: Unauthenticated malformed DNS compression pointers crash per-packet honeypot handler5.3 Medium- lepture mistuneMistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown files5.3 Medium
- erweixin ratexratex-parser has unbounded parser recursion that leads to stack overflow (process abort)6.9 Medium
- sri mojo::jsonMojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder6.5 Medium
- No product listedpdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu...7.5 High
- surrealdbSurrealDB before 3.1.0 Denial of Service nested type annotations7.1 High
- surrealdbSurrealDB before 3.1.0 Denial of Service via JSON Parser8.7 High
- imagemagickImageMagick: Stack Overflow in MVG decoder due to missing depth check.5.3 Medium
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of Service6.5 Medium
- linux, linux kernel +1 moredrm/amd/display: Use krealloc_array() in dal_vector_reserve()7.0 High
- microsoft openapi.netMicrosoft.OpenAPI: Circular schema references may terminate OpenAPI parsing7.5 High
- sanko net::bittorrentNet::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input7.5 High
- leandrocp mdex, mdex native +1 moreUncontrolled recursion over deeply nested Markdown crashes the BEAM in mdex6.9 Medium
- p11-kit project p11-kit, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +16 more +18 moreP11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing6.2 Medium
- scribanScriban 6.6.0 through 7.2.0 Parser Recursion Denial of Service8.7 High
- linux, linux kernel +1 morearm64: Reserve an extra page for early kernel mapping5.5 Medium
- linux, linux kernel +1 morenetfilter: nft_ct: bail out on template ct in get eval7.8 High
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 moreaccel/ivpu: Fix signed integer truncation in IPC receive7.8 High
- artifex mupdfMuPDF < 1.27.0-rc1 Stack Exhaustion DoS via EPUB CSS Rendering7.1 High
- messagepack, messagepack-csharp +1 moreMessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflows8.2 High
- messagepack, messagepack-csharp +1 moreMessagePack-CSharp: MessagePackReader.Skip can recurse without enforcing maximum object graph depth7.5 High
- messagepack, messagepack-csharp +1 moreMessagePack-CSharp: JSON conversion APIs can recurse without consistent depth enforcement6.3 Medium
- messagepack, messagepack-csharp +1 moreMessagePack-CSharp: DynamicUnionResolver generated deserializers miss depth enforcement6.3 Medium
- surrealdbSurrealDB before 3.1.5 Denial of Service via deep operator chains7.1 High
- faraday project faraday, red hat 3scale api management platform 2, satellite 6 +5 more +7 moreFaraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters7.5 High
- protobufjs project protobufjs, protobufjs protobuf.js +1 moreprotobufjs: Denial of service through unbounded Any expansion during JSON conversion7.5 High
- protobufjs project protobufjs, protobufjs protobuf.js, protobufjs project protobufjs-cli +2 moreprotobufjs: Schema-derived names can shadow runtime-significant properties5.3 Medium
- avast antivirus, business antivirus, gen digital avast antivirus +4 more +6 moreAvast antivirus stack overflow when scanning a malformed PDF file5.5 Medium
- avast antivirus, business antivirus, gen digital avast antivirus +4 more +6 moreAvast antivirus infinite recursion when scanning a malformed PE file5.5 Medium
- ibm qiskit sdk, qiskit software development kit +1 moreQiskit SDK is vulnerable to specific functions may recurse too deeply and overflow the available stack space, when encountering certain classical expressions.7.5 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreUnbounded recursion in BSONColumn interleaved-reference causes pre-auth stack overflow8.7 High
- freeswitchFreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSON7.5 High
- imagemagickImageMagick: Stack Overflow in MVG decoder5.5 Medium
- strawberry graphql, strawberry-graphql strawberry +1 moreStrawberry GraphQL has a Circular Fragment Reference DOS5.3 Medium
- samsung open source rlottieUncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Oversized Serialized...6.1 Medium
- samsung open source rlottieAccess of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source...6.1 Medium
- rrwo net::cidr::set, net\ +1 moreNet::CIDR::Set versions through 0.20 for Perl did not validate IP addresses7.5 High
- docker desktopUnbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM8.2 High
- spring cloud function, vmware spring cloud function +1 moreSelf Routing guard bypassed via function composition5.7 Medium
- paulsm zeroconf, python-zeroconf +1 moreZeroconf: Unbounded recursion in DNS compression-pointer decoder allows LAN-local denial of service6.5 Medium
- Show moreLoading…