CWE-835: Loop with Unreachable Exit Condition
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Also known as Infinite Loop.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- xmlsoft libxml2, debian linux +1 moreThe xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote...5.3 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA GPU Display Driver contains a vulnerability in the DirectX and OpenGL Usermode drivers...5.5 Medium
- long range zip project range zipIn Long Range Zip (aka lrzip) 0.631, there is an infinite loop in the runzip_fd function of...5.5 Medium
- apache commons compress, oracle mysql cluster, weblogic server +2 moreApache Commons Compress vulnerable to denial of service due to infinite loop5.5 Medium
- exempi project exempi, debian linux +1 moreAn issue was discovered in Exempi before 2.4.4. The TradQT_Manager::ParseCachedBoxes function in...5.5 Medium
- exempi project exempi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in...5.5 Medium
- exempi project exempi, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles...5.5 Medium
- rubygems, debian linux +1 moreRubyGems Infinite Loop vulnerability7.5 High
- podofo project podofoIn PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject:...8.8 High
- huawei dp300 firmware, rp200 firmware, te30 firmware +4 more +6 moreTimergrp module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10;...5.5 Medium
- huawei dp300 firmware, rp200 firmware, te30 firmware +4 more +6 moreHuawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50...5.7 Medium
- linux kernelThe madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local...5.5 Medium
- xpdfreader xpdfInfinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch...5.5 Medium
- wiresharkIn Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-reload.c had an infinite...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-ber.c had an infinite...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thread.c had an infinite...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-s7comm.c had an infinite...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-usb.c had an infinite...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-openflow_v6.c had an...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-lltd.c had an infinite...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpki-rtr.c had an...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-sccp.c had an infinite...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-dcm.c had an infinite...7.5 High
- xpdfreader xpdfAn issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause...5.5 Medium
- jboss jboss-remoting, redhat jboss enterprise application platform +1 moreA vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions...7.5 High
- quagga bgpd, quagga, canonical ubuntu linux +2 more +4 moreThe Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in...6.5 Medium
- qpdf project qpdfAn issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref...5.5 Medium
- qpdf project qpdfAn issue was discovered in QPDF before 7.0.0. There is an infinite loop in the QPDFWriter:...5.5 Medium
- ccn-liteccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified...7.8 High
- apache poiDenial of Service in Apache POI7.5 High
- tats w3m, canonical ubuntu linux +1 morew3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the...7.5 High
- long range zip project range zip, debian linux +1 moreIn Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the...5.5 Medium
- artifex mupdf, debian linux +1 moreIn MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the...5.5 Medium
- graphicsmagick, debian linux +1 moreIn GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage...6.5 Medium
- google androidIn the ihevcd_parse_sps function of ihevcd_parse_headers.c, several parameter values could be...7.5 High
- google androidIn ihevcd_decode.c there is a possible infinite loop due to bytes for an sps of unsupported...7.5 High
- google androidIn the ihevcd_parse_slice_header function of ihevcd_parse_slice_header.c a slice address of zero...7.5 High
- google androidIn the ihevcd_decode function of ihevcd_decode.c, there is an infinite loop due to an incomplete...7.5 High
- long range zip project range zipIn Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the...5.5 Medium
- php, canonical ubuntu linux, debian linux +2 moregd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7...5.5 Medium
- axiosys bento4The AP4_FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a...7.8 High
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function...6.5 Medium
- xenAn issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of...6.5 Medium
- exim, debian linux +1 moreThe receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote...7.5 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreNokogiri gem, via libxml, is affected by DoS vulnerabilities7.5 High
- automattic mongooseAn infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8...7.5 High
- systemd project systemd, canonical ubuntu linux +1 moreIn systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC...7.5 High
- serialize-to-js project serialize-to-js** DISPUTED ** The deserialize function in serialize-to-js through 1.1.1 allows attackers to...7.5 High
- Show moreLoading…