CWE-834: Excessive Iteration
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
A kind of CWE-691 Insufficient Control Flow Management.
From the CWE List. © The MITRE Corporation.
Newest
- wiresharkExcessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows...6.3 Medium
- cloudflare octorpkiOctoRPKI crash when maximum iterations number is reached5.4 Medium
- appsup-dart joseJOSE vulnerable to resource exhaustion via specifically crafted JWE5.3 Medium
- radare radare2A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping...7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreLarge loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow...4.3 Medium
- wireshark, fedoraproject fedora +1 moreLarge loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet...7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUsing the Location API in a loop could have caused severe application hangs and crashes. This...6.5 Medium
- wireshark, debian linux +1 moreNULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of...7.5 High
- wireshark, debian linux, fedoraproject fedora +2 moreLarge loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows...7.5 High
- envoyproxy envoy, pomerium +1 moreExcessive CPU usage in Pomerium7.5 High
- google androidIn ellipsize of Layout.java, there is a possible ANR due to improper input validation. This could...5.0 Medium
- envoyproxy envoyExcessive CPU utilization when closing HTTP/2 streams5.8 Medium
- dell powerscale onefsDell PowerScale OneFS versions 9.1.0.3 and earlier contain a denial of service vulnerability....5.3 Medium
- apache commons compress, netapp active iq unified manager, oncommand insight +23 more +25 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerability7.5 High
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +4 more +6 moreA carefully crafted PDF file can trigger an infinite loop while loading the file5.5 Medium
- asus rt-ac1750 b1 firmware, rt-ac1900 firmware, rt-ac1900p firmware +24 more +26 moreIn ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386...7.5 High
- tp-link tl-xdr1850 firmware, tl-xdr1860 firmware, tl-xdr3230 firmware +3 more +5 moreIn TP-Link TL-XDR3230 < 1.0.12, TL-XDR1850 < 1.0.9, TL-XDR1860 < 1.0.14, TL-XDR3250 < 1.0.2, TL...7.5 High
- gargoyle-router gargoyleIn Gargoyle OS 1.12.0, when IPv6 is used, a routing loop can occur that generates excessive...7.5 High
- debian linux, linux kernel, fedoraproject fedora +2 moreAn issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU"...5.5 Medium
- apache pdfbox, fedoraproject fedora, oracle banking trade finance process management +12 more +14 moreA carefully crafted PDF file can trigger an infinite loop while loading the file5.5 Medium
- postsrsd project postsrsd, debian linux +1 moresrs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service (CPU...7.5 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInvariant with $elemMatch6.5 Medium
- hashicorp consulDenial of service in HashiCorp Consul7.5 High
- samba, canonical ubuntu linux, debian linux +2 more +4 moreA flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and...7.5 High
- google androidIn XMF_ReadNode of eas_xmf.c, there is possible resource exhaustion due to improper input...6.5 Medium
- google androidIn Parse_ptbl of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check....6.5 Medium
- google androidIn Parse_art of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check....6.5 Medium
- google androidIn Parse_lart of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check....6.5 Medium
- google androidIn IMY_Event of eas_imelody.c, there is possible resource exhaustion due to a missing bounds...6.5 Medium
- google androidIn RTTTL_Event of eas_rtttl.c, there is possible resource exhaustion due to a missing bounds...6.5 Medium
- linux kernel, canonical ubuntu linux, netapp active iq unified manager +7 more +9 moreext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows...5.5 Medium
- google androidIn the Accounts package, there is a possible crash due to improper input validation. This could...5.5 Medium
- uclouvain openjpeg, debian linux, opensuse leap +2 more +4 moreIn OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1...5.5 Medium
- facebook thriftLegacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving...7.5 High
- facebook thriftImproper Input Validation and Excessive Iteration in Go Facebook Thrift7.5 High
- facebook thriftJava Facebook Thrift servers would not error upon receiving messages with containers of fields of...7.5 High
- facebook thriftPython Facebook Thrift servers would not error upon receiving messages with containers of fields...7.5 High
- facebook thriftC++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers...7.5 High
- spdk storage performance development kitIn Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e.,...5.3 Medium
- xpdfreader xpdfAn issue was discovered in Xpdf 4.00. catalog->getNumPages() in AcroForm.cc allows attackers to...5.5 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector...7.5 High
- ijg libjpeglibjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.7.5 High
- flifAn issue was discovered in Free Lossless Image Format (FLIF) 0.3. An attacker can trigger a long...6.5 Medium
- google androidIn M3UParser::parse of M3UParser.cpp, there is a memory resource exhaustion due to a large loop...5.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage...6.5 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop...7.5 High
- entropymine imageworsenerlibimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the...5.3 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders...6.5 Medium
- Show moreLoading…