CWE-674: Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Also known as Stack Exhaustion.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- barebones bbeditBareBones BBEdit Java Language recursion5.3 Medium
- ash-project ash obanUnbounded handle_error recursion enables denial of service in AshOban triggers5.9 Medium
- elixir-lang elixirUnbounded recursion between Inspect.List charlist rendering and List.to_string/1 error path in Elixir5.9 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreAn attacker that has valid credentials can send crafted compressed data that causes the affected...6.5 Medium
- nltkNLTK before 3.10.3 Denial of Service via Uncontrolled Recursion6.9 Medium
- spring ai, vmware spring ai +1 moreUnbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader7.5 High
- deislabs orasORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption6.5 Medium
- autodesk 3ds maxSVG File Parsing Stack Exhaustion Vulnerability in Autodesk 3ds Max5.5 Medium
- lepture mistuneMistune has Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown7.5 High
- unleashUnleash: Unauthenticated single-request DoS via OpenAPI validation error formatter7.5 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.5 High
- django cms association django-cmsdjango CMS: Plugin move endpoint allows cyclic reparenting (DoS)7.1 High
- eclipse foundation openj9In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations...5.7 Medium
- rabbitmq rabbitmq-java-clientRabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS8.7 High
- plutext docx4j, org.docx4j docx4j-core +1 moredocx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service7.5 High
- rebeccastevens deepmerge-tsdeepmerge-ts: Stack exhaustion when merging recursive object graphs8.2 High
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilities7.5 High
nltkDebianNLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars6.9 Medium- elastic elasticsearchUncontrolled Recursion in Elasticsearch Wildcard Matching Leading to Denial of Service6.5 Medium
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of Service6.5 Medium
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of Service6.5 Medium
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of Service6.5 Medium
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of Service6.5 Medium
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of Service6.5 Medium
- hapifhir ca.uhn.hapi.fhir:org.hl7.fhir.r5, ca.uhn.hapi.fhir:org.hl7.fhir.utilities, ca.uhn.hapi.fhir:org.hl7.fhir.validation +2 more +4 moreHAPI FHIR: XHTML narrative parser unbounded recursion causes StackOverflow denial of service7.5 High
- hapifhir ca.uhn.hapi.fhir:org.hl7.fhir.r5, ca.uhn.hapi.fhir:org.hl7.fhir.utilities, ca.uhn.hapi.fhir:org.hl7.fhir.validation +2 more +4 moreHAPI FHIR: JSON utility parser unbounded recursion causes StackOverflow denial of service7.5 High
- apache apr-util, apache software foundation portable runtime utility +1 moreApache Portable Runtime Utility: apr-util XML stack recursion crash9.1 Critical
- github enterprise serverDenial of service vulnerability in GitHub Enterprise Server allowed unauthenticated service disruption via deeply nested request parameters6.6 Medium
- apache lucyApache Lucy: QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoS7.5 High
- apache qpid protonj2Apache Qpid ProtonJ2: Unbounded type nesting can lead to pre-authentication stackoverflow7.5 High
- apache qpid proton-dotnet, apache software foundation qpid proton dotnet +1 moreApache Qpid Proton Dotnet: Unbounded type nesting can lead to pre-authentication stackoverflow7.5 High
- apache qpid broker-jApache Qpid Broker-J: Unbounded type nesting can lead to pre-authentication stack overflow7.5 High
- apache qpid proton-jApache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow7.5 High
- djangoproject djangoPotential denial-of-service vulnerability via nested geometry collections6.9 Medium
- misskey-dev misskeyMisskey: Denial of Service via Uncontrolled Recursion in Theme Compilation5.1 Medium
- bouncycastle bouncy castle for java lts, legion of the bouncy castle inc. bc-fja, bouncycastle bc-java +2 more +4 moreLazy ASN.1 sequence forcing resets nesting-depth guard8.7 High
- bouncycastle bcutil-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 moreOER parser recurses without depth limit on self-referential IEEE 1609.2 schema8.7 High
- amazon aws-smithy-jsonUncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers8.7 High
- svarshavchik courier imap, courier mail server +1 moreCourier IMAP < 6.0.1 Mail Server < 2.0.2 Stack Overflow DoS via Nested SEARCH Queries7.1 High
- cjson project cjsoncJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion8.7 High
- apache traffic serverApache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery8.2 High
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by a denial of service7.1 High
- pivotickPivotick - Stack Exhaustion Denial of Service via Deep or Cyclic Graph Data8.2 High
- erlang otp, erlang\/otp, erlang\/ssl +2 moreTLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain8.7 High
- ggml-org llama.cppggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursion6.9 Medium
- isaacs node-tarnode-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection7.5 High
- linux, linux kernel +1 moredrm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async7.0 High
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of Service6.5 Medium
- aws aws-sdk-rustUncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows unauthenticated remote denial of service via recursive shapes8.7 High
- axiosaxios 0.31.1 before 0.33.0 and 1.15.1 before 1.18.0 Denial of Service via maxDepth bypass6.9 Medium
- Show moreLoading…