CWE-835: Loop with Unreachable Exit Condition
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Also known as Infinite Loop.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- qemu, debian linux +1 moreQEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite...5.5 Medium
- imagemagickThe ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows...6.5 Medium
- imagemagickThe ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote...6.5 Medium
- imagemagickImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service ...6.5 Medium
- imagemagickThe ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to...5.5 Medium
- linux kernel, suse linux enterprise real time extension +1 moreThe fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local...6.2 Medium
- qemu, debian linux +1 moreThe ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators...5.5 Medium
- ntp, debian linux, netapp clustered data ontap +4 more +6 morentpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to...6.5 Medium
- qemu, arista eos, canonical ubuntu linux +1 more +3 moreThe ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a...6.5 Medium
- qemu, arista eos, canonical ubuntu linux +8 more +10 moreThe process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process...3.5 Low
- qemu, arista eos, canonical ubuntu linux +5 more +7 moreInteger overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a...6.5 Medium
- apache poi, fedoraproject fedora +1 moreLoop with Unreachable Exit Condition in Apache POI5.0 Medium
- apache cxfLoop with Unreachable Exit Condition in Apache CXF5.0 Medium
- qemu, redhat enterprise linux desktop, enterprise linux eus +6 more +8 moreQemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other...5.5 Medium
- apache commons fileupload, tomcat, oracle retail applications +2 moreCommons FileUpload Denial of service vulnerability7.5 High
- kepware kepserverexThe Kepware DNP Master Driver for the KEPServerEX Communications Platform before 5.12.140.0...7.8 High
- rack project rackRack vulnerable to REDoS4.3 Medium
- linux kernelThe Linux kernel before 2.6.37 does not properly implement a certain clock-update optimization,...5.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreInteger overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and...5.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +7 more +9 moreImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite...5.5 Medium
- linux kernel, redhat enterprise linux aus, enterprise linux desktop +3 more +5 moreThe inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does...4.9 Medium
- wiresharkStack consumption vulnerability in the dissect_ber_choice function in the BER dissector in...5.0 Medium
- avahi, canonical ubuntu linux, debian linux +2 more +4 moreavahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a...5.0 Medium
- debian linux, linux kernel +1 morenet/ipv4/inet_diag.c in the Linux kernel before 2.6.37-rc2 does not properly audit INET_DIAG...4.9 Medium
- adobe shockwave playerAdobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service ...6.5 Medium
- samba, canonical ubuntu linux +1 moresmbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows...4.0 Medium
- clamav, canonical ubuntu linux, debian linux +2 morelibclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service ...7.8 High
- mozilla firefox, seamonkey, thunderbird +2 more +4 moreThe js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird...4.3 Medium
- microsoft asp.netaspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of...5.0 Medium
- filezilla-project filezilla serverFileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers...5.0 Medium
- gnome gtk, gdkpixbuf +1 moreThe BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote...5.0 Medium
- apache http servermod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU...5.0 Medium