CWE-835: Loop with Unreachable Exit Condition
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Also known as Infinite Loop.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- argosoft mini mail serverDenial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote...5.3 Medium
- gnu libextractorIn GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the...7.5 High
- gnu binutilsfind_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd),...5.5 Medium
- gnu binutilsprocess_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd), as...5.5 Medium
- gnu binutilsread_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as...5.5 Medium
- gnu binutilsdecode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as...5.5 Medium
- freedesktop popplerIn Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup() in Object.h after a...7.5 High
- imagemagickThe ReadCAPTIONImage function in coders/caption.c in ImageMagick 7.0.7-3 allows remote attackers...6.5 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an...5.5 Medium
- yadifaThe DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer...7.5 High
- freedesktop popplerIn Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after...7.5 High
- tcpdumpThe LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c...7.5 High
- tcpdumpThe DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain...7.5 High
- tcpdumpThe ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print...7.5 High
- tcpdumpThe RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c...7.5 High
- jasper project jasperThere is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13. It...7.5 High
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might...6.5 Medium
- ffmpegIn FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload...6.5 Medium
- wiresharkIn Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an...7.5 High
- sleuthkit the sleuth kit, debian linux +1 moreIn The Sleuth Kit (TSK) 4.4.2, opening a crafted disk image triggers infinite recursion in...5.5 Medium
- invisible-island ncursesThere is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to...7.5 High
- numpyNumpy missing input validation7.5 High
- apache tomcatImproper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat7.5 High
- openexif project openexifThe ExifImageFile::readImage function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote...5.5 Medium
- surina soundtouchThe TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2...5.5 Medium
- qpdf project qpdfA stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to...5.5 Medium
- qpdf project qpdfA stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to...5.5 Medium
- qpdf project qpdfA stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to...5.5 Medium
- qpdf project qpdfA stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to...5.5 Medium
- imagemagickThe ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1...6.5 Medium
- linux kernelThe ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3...5.5 Medium
- imagemagickThe ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an infinite loop...6.5 Medium
- wiresharkIn Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite...7.5 High
- imagemagickThe ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0...6.5 Medium
- freeradiusAn FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()...7.5 High
- freeradiusAn FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion...7.5 High
- exiv2There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0...6.5 Medium
- gnome gnome-sessionBad reference counting in the context of accept_ice_connection() in gsm-xsmp-server.c in old...5.5 Medium
- [unknown] undertow, debian linux, redhat jboss enterprise application platform +2 moreModerate severity vulnerability that affects io.undertow:undertow-core7.5 High
- google androidA denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0...5.5 Medium
- audiocoding freeware advanced audio decoder 2The mp4ff_parse_tag function in common/mp4ff/mp4meta.c in Freeware Advanced Audio Decoder 2 ...5.5 Medium
- libexpat project libexpat, debian linux, python +2 moreXML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows...7.5 High
- qemu, debian linux +1 moreQEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local...5.5 Medium
- libquicktimeThe quicktime_read_moov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause...6.5 Medium
- gnome libcroco, opensuse leap +1 moreThe cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote...6.5 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest...5.6 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows...5.6 Medium
- samba, debian linux, redhat enterprise linux desktop +5 more +7 moresmbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability ...6.5 Medium
- asterisk certified asterisk, sangoma asterisk +1 moreA memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x...7.5 High
- Show moreLoading…