CWE-835: Loop with Unreachable Exit Condition
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Also known as Infinite Loop.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- golang text, fedoraproject fedora +1 moregolang.org/x/text Infinite loop7.5 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes...7.5 High
- google androidIn ihevcd_decode() of ihevcd_decode.c, there is possible resource exhaustion due to an infinite...6.5 Medium
- google androidIn ihevcd_ref_list() of ihevcd_ref_list.c, there is a possible infinite loop due to a missing...6.5 Medium
- google androidIn Parse_ptbl of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check....6.5 Medium
- google androidIn Parse_art of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check....6.5 Medium
- google androidIn Parse_lart of eas_mdls.c, there is possible resource exhaustion due to a missing bounds check....6.5 Medium
- google androidIn IMY_Event of eas_imelody.c, there is possible resource exhaustion due to a missing bounds...6.5 Medium
- google androidIn RTTTL_Event of eas_rtttl.c, there is possible resource exhaustion due to a missing bounds...6.5 Medium
- qemu, canonical ubuntu linux, opensuse leap +2 moreati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via...6.0 Medium
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource...7.5 High
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference...7.5 High
- nlnetlabs unbound, canonical ubuntu linux, debian linux +2 more +4 moreUnbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.7.5 High
- linux kernelAn issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c in the Linux kernel...5.5 Medium
- apache tika, the apache software foundation apache tika, oracle communications messaging server +3 more +5 moreMissing Release of Memory after Effective Lifetime in Apache Tika5.5 Medium
- convert\ \, fedoraproject fedora +1 moreperl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to...7.5 High
- apache tika, canonical ubuntu linux, debian linux +3 more +5 moreInfinite Loop in Apache Tika5.5 Medium
- jsonparser project jsonparser, fedoraproject fedora +1 moreInfinite Loop in jsonparser7.5 High
- apple icloud, icloud for windows, icloud for windows (legacy) +8 more +10 moreA denial of service issue was addressed with improved input validation.7.5 High
- opensipsA Denial of Service (infinite loop) exists in OpenSIPS before 1.10 in lookup.c.7.5 High
- dovecot, fedoraproject fedora +1 morelib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8...7.5 High
- percona monitoring and managementpmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated...7.5 High
- sos-berlin jobschedulerA large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and...6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreIn Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an...7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +24 more +26 morelibxml as used in Nokogiri has an infinite loop in a certain end-of-file situation7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.6.5 Medium
- ezxml project ezxmlAn issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxml_parse_* functions mishandle XML...6.5 Medium
- linux kernelA locally locally exploitable DOS vulnerability was found in pax-linux versions 2.6.32.33-test79...5.5 Medium
- huawei usg9500, usg9500 firmware +1 moreUSG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a...7.5 High
- imagemagick, debian linux +1 moreimagemagick 6.8.9.6 has remote DOS via infinite loop6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +53 more +55 moreInfinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto,...7.5 High
- leadtoolsAn exploitable denial-of-service vulnerability exists in the Dicom-packet parsing functionality...7.5 High
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen through 4.12.x allowing x86 guest OS users to cause a denial of...6.5 Medium
- otrsDenial of service5.3 Medium
- validators project validatorsUncontrolled resource consumption in validators Python package7.5 High
- embedthis goaheadA denial-of-service vulnerability exists in the processing of multi-part/form-data requests in...5.3 Medium
- gnome dia, fedoraproject fedora, opensuse leap +2 moreWhen GNOME Dia before 2019-11-27 is launched with a filename argument that is not a valid...5.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11 through 12.4 when building...7.5 High
- cesanta mongooseAn integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to...9.8 Critical
- openstack designate, debian linux, redhat enterprise linux openstack platform +2 moreDesignate does not enforce the DNS protocol limit concerning record set sizes6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +51 more +53 moreWhile processing Attach Reject message, Valid exit condition is not met resulting into an...7.5 High
- hyper httpInteger Overflow/Infinite Loop in the http crate7.5 High
- istioIstio vulnerable to denial of service7.5 High
- envoyproxy envoy, istio +1 moreEnvoy before 1.12.1 allows a remote denial of service because of resource loops, as demonstrated...7.5 High
- xpdfreader xpdf, poppler +1 moreIn xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial...5.5 Medium
- apache thrift, oracle communications cloud native core network slice selection function, redhat jboss enterprise application platform +2 moreLoop with Unreachable Exit Condition in Apache Thrift7.5 High
- proftpdProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service...7.5 High
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of...5.5 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of...5.5 Medium
- qemu, canonical ubuntu linux, opensuse leap +2 moreIn QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8...3.8 Low
- Show moreLoading…