CWE-674: Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Also known as Stack Exhaustion.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- apache xmlschemaApache XMLSchema: Denial of service through unbounded recursion when resolving schema imports and includes7.5 High
- nestjs nestNest: Remote process termination via a deeply nested microservice message pattern7.5 High
- juliangruber brace-expansionbrace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion7.5 High
- juliangruber brace-expansionbrace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion7.5 High
- jpadilla pyjwtPyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header5.3 Medium
- nodemailerNodemailer before 10.0.2 Stack Exhaustion via Nested Recipient Arrays8.2 High
- phpSOAP: Unbounded Recursion in Server-Side cleanup_xml_node7.5 High
- apache qpid broker-jApache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing7.5 High
- wazuhWazuh: Unbounded Recursion in os_xml `_getattributes()` Causes analysisd Worker Thread Stack Exhaustion6.5 Medium
- moquetteMoquette fails open when configured authentication or authorization classes cannot load9.3 Critical
- moquetteMoquette client IDs can cause cross-session H2 durable-queue corruption8.8 High
- moquetteMoquette publishes Last-Will messages without enforcing write authorization8.7 High
- moquetteMoquette unbounded per-session message queues allow memory exhaustion8.7 High
- moquetteMoquette deeply nested MQTT topics can cause stack exhaustion8.7 High
- moquetteMoquette malformed shared subscriptions can crash command processing8.7 High
- moquetteMoquette uncaught MQTT command exceptions can terminate shared session event loops8.7 High
- moquetteMoquette pattern ACL wildcard injection allows cross-tenant authorization bypass9.6 Critical
- sunnyadn js-tomljs-toml: Uncontrolled recursion in `load()` causes `RangeError` (stack exhaustion) on deeply nested input5.3 Medium
- adobe bridgeBridge | Uncontrolled Recursion (CWE-674)7.8 High
- @clerk express, ubiquiti inc cloud gateways, dream machines +5 more +7 moreA malicious actor with access to the network could exploit an Uncontrolled Recursion...7.5 High
- qtDenial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt2.3 Low
- tomwright daselDasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS6.2 Medium
- temporal technologies, inc. server, temporalio/sqlparser +1 moretemporalio/sqlparser deeply nested unary expressions can cause a fatal stack overflow during AST traversal8.7 High
- apache neethiApache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service7.5 High
- icinga icinga2Icinga 2: Stack overflow via deeply nested JSON objects8.6 High
- academysoftwarefoundation openimageioOpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow6.5 Medium
- micromatch bracesbraces through 3.0.3 Stack Overflow via Deeply Nested Patterns8.7 High
- go-openapi swaggo-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshal8.7 High
- noderedis redis-parserredis-parser through 3.0.0 Denial of Service via Unbounded Recursion8.7 High
- traccarTraccar: Uncontrolled Infinite Loop DoS via Group Parent Cycle6.5 Medium
- google protobuf-javascript (aka google-protobuf npm package)Uncontrolled Recursion leading to Denial of Service in protobuf-javascript (google-protobuf)8.7 High
- qtUnbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt7.1 High
- ibm security verify access, verify identity access, security verify access container +1 more +3 moreSecurity vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access7.5 High
- go-vikunja vikunjavikunja before 2.6.0 Denial of Service via unbounded filter recursion7.1 High
- msgpack msgpack-javamsgpack-java through 0.9.12 Stack Overflow via Nested Arrays6.9 Medium
- red hat service interconnect 2 for rhel 8, service interconnect 2 for rhel 9 +1 moreSkupper-router: skupper-router: unbounded recursion in amqp field parser leads to denial of service5.9 Medium
- eprosima fast-ddsFast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)7.5 High
- google go-attestationDenial of Service via Unbounded Recursion in go-attestation Windows SIPA Parser6.6 Medium
- microsoft exchange server, exchange server subscription edition, exchange server 2016 cumulative update 23 +3 more +5 moreMicrosoft Exchange Server Denial of Service Vulnerability7.5 High
- xenforoXenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parser7.1 High
- qtUncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)7.1 High
- ibm app connect enterprise, integration bus for z/os, integration bus for z\/os +2 moreIBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs5.5 Medium
- binarymuse toml-nodetoml-node: Uncontrolled Recursion7.5 High
- amazon ion-cUncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.68.7 High
- autodesk revit, shared components +1 moreIFC File Parsing Uncontrolled Recursion in Certain Autodesk Products5.5 Medium
- eclipse foundation dittoIn Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing or Feature, without va…5.3 Medium
libnet-dns-perlDebian,perl-Net-DNSAlmaLinux,perl-Net-DNS-NameserverAlmaLinux +2 moreNet::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record7.5 High- ggml llama.cppllama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers...7.5 High
- ggml llama.cppllama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to...7.5 High
- samsung open source rlottieUncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Serialized Data with...5.5 Medium
- Show moreLoading…