CWE-835: Loop with Unreachable Exit Condition
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Also known as Infinite Loop.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- linux kernelAn issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect...7.5 High
- wireshark, debian linux, opensuse leap +2 moreIn Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite...7.5 High
- apache commons compress, fedoraproject fedora, oracle banking payments +16 more +18 moreDenial of Service in Apache Commons Compress7.5 High
- riot-os riotIn the TCP implementation (gnrc_tcp) in RIOT through 2019.07, the parser for TCP options does not...7.5 High
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreIn DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service...5.5 Medium
- libav, debian linux +1 moreIn mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek...6.5 Medium
- libavIn Libav 12.3, there is an infinite loop in the function wv_read_block_header() in the file wvdec.c.6.5 Medium
- libavAn issue was discovered in Libav 12.3. There is an infinite loop in the function mov_probe in the...6.5 Medium
- mgettymgetty prior to version 1.2.1 is affected by: Infinite Loop. The impact is: DoS, the program does...5.5 Medium
- haproxyHAProxy through 2.0.2 allows attackers to cause a denial of service (ha_panic) via vectors...7.5 High
- foxitsoftware phantompdfAn issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when...7.5 High
- scapy, fedoraproject fedora +1 moreInfinite Loop in scapy7.5 High
- zipios project zipiosZipios before 0.1.7 does not properly handle certain malformed zip archives and can go into an...6.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, Malformed http requests made to an undisclosed...6.5 Medium
- apache commons imagingInfinite Loop in Apache Sanselan7.5 High
- facebook fizzAn improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 moreAn infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and...6.3 Medium
- wireshark, fedoraproject fedora +1 moreIn Wireshark 3.0.0, the Rbm dissector could go into an infinite loop. This was addressed in epan...7.5 High
- wireshark, fedoraproject fedora +1 moreIn Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan...7.5 High
- wireshark, fedoraproject fedora +1 moreIn Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed...7.5 High
- shellinabox project shellinaboxlibhttp/url.c in shellinabox through 2.20 has an implementation flaw in the HTTP request parsing...7.5 High
- [unknown] openwsman, fedoraproject fedora, opensuse leap +2 moreOpenwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in...7.5 High
- tinysvcmdns project tinysvcmdnsIn tinysvcmdns through 2018-01-16, a maliciously crafted mDNS (Multicast DNS) packet triggers an...7.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreOn BIG-IP 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, and 14.0.0-14.0.0.2, Multi...5.9 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreIn the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows...9.8 Critical
- mcafee getsusp, mcafee, llc mcafee getsusp (getsusp) +1 moreGetSusp (a free McAfee tool) update fixes an infinite loop vulnerability (CVE-2018-6687)6.5 Medium
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0...6.5 Medium
- pylonsproject colanderPylons Colander Denial of Service vulnerability7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid...4.2 Medium
- libraw, debian linux +1 moreAn error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions...7.5 High
- cairographics cairoAn issue was discovered in cairo 1.16.0. There is an infinite loop in the function...6.5 Medium
- saitoha libsixelIn libsixel v1.8.2, there is an infinite loop in the function sixel_decode_raw_impl() in the file...5.5 Medium
- nuttxAn issue was discovered in NuttX before 7.27. The function netlib_parsehttpurl() in apps/netutils...7.5 High
- gnu tar, debian linux, opensuse leap +3 more +5 moreGNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which...4.7 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and...6.5 Medium
- apache tikaApache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser6.5 Medium
- libpff project libpfflibpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows...5.5 Medium
- qemu, canonical ubuntu linux +1 moreQEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not...7.5 High
- kaspersky libvnc, canonical ubuntu linux, debian linux +1 more +3 moreLibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop...7.5 High
- exiv2There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3....6.5 Medium
- haproxy, canonical ubuntu linux, redhat openshift container platform +2 moreAn issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer,...7.5 High
- jenkins, redhat openshift container platform +1 moreLoop with Unreachable Exit Condition in Jenkins6.5 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...6.5 Medium
- wavpack, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows...5.5 Medium
- sass-lang libsass** DISPUTED ** In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop...6.5 Medium
- artifex mupdf, debian linux +1 moreIn Artifex MuPDF 1.14.0, there is an infinite loop in the function svg_dev_end_tile in fitz/svg...5.5 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite...7.5 High
- [unknown] samba, canonical ubuntu linux, debian linux +2 moreA denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4...6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreIn Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer...6.5 Medium
- google androidIn ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite...5.5 Medium
- Show moreLoading…