CWE-835: Loop with Unreachable Exit Condition
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Also known as Infinite Loop.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an...3.5 Low
- apache tika, oracle communications messaging server, healthcare foundation +2 more +4 moreInfinite loop in Apache Tika's MP3 parser5.5 Medium
- x-stream xstream, apache activemq, jmeter +10 more +12 moreXStream can cause a Denial of Service7.5 High
- qemu, debian linux, fedoraproject fedora +1 more +3 moreA potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in...6.0 Medium
- stackstormStackStorm st2 Infinite Loop Condition7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm csrb31024 firmware, pm3003a firmware +111 more +113 moreModem will enter into busy mode in an infinite loop while parsing histogram dimension due to...5.5 Medium
- siemens simatic s7-plcsim v5.4, simatic s7-plcsim +1 moreA vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with...5.5 Medium
- golang goencoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom...7.5 High
- qemu, debian linux +1 moreA stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device...5.5 Medium
- pygments, debian linux, fedoraproject fedora +5 more +7 moreInfinite Loop in Pygments7.5 High
- gnu glibc, debian linux, netapp 500f firmware +14 more +16 moreThe iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing...5.5 Medium
- qemu, debian linux, fedoraproject fedora +5 more +7 moreAn infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while...6.5 Medium
- belden hirschmann hiosHirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service. An...6.5 Medium
- privateoctopus picoquicpicoquic (before 3rd of July 2020) allows attackers to cause a denial of service (infinite loop)...7.5 High
- openwrtIn OpenWrt 19.07.x before 19.07.7, when IPv6 is used, a routing loop can occur that generates...6.5 Medium
- openldap, apple macos, debian linux +3 more +5 moreA flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the...7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX Series: Traffic loop Denial of Service (DoS) upon receipt of specific IP multicast traffic6.5 Medium
- kamadak-exif project kamadak-exif, kamadak exif-rs +1 moreInfinite loop in parsing PNG files in5.7 Medium
- tenda ac6 firmwareOn Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the...7.5 High
- microsoft azure sphereA denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft...5.5 Medium
- altran picotcp, picotcp-ng +1 moreAn issue was discovered in picoTCP and picoTCP-NG through 1.7.0. When an unsupported TCP option...7.5 High
- altran picotcpAn issue was discovered in picoTCP 1.7.0. The routine for processing the next header field (and...7.5 High
- contiki-os contikiAn issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack...7.5 High
- contiki-os contikiAn issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack...7.5 High
- gnome gdk-pixbuf, canonical ubuntu linux, fedoraproject fedora +2 moreGNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw...5.5 Medium
- qemu, debian linux +1 morehw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer...5.5 Medium
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreInfinite loop in aggregation expression6.5 Medium
- linux kernelAn issue was discovered in ioapic_lazy_update_eoi in arch/x86/kvm/ioapic.c in the Linux kernel...5.5 Medium
- freedesktop accountsserviceaccountsservice .pam_environment infinite loop2.8 Low
- wireshark, debian linux, fedoraproject fedora +2 moreIn Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash. This was addressed in epan...7.5 High
- un4seen bassThe BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service...6.5 Medium
- wireshark, debian linux, fedoraproject fedora +1 more +3 moreIn Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A...5.5 Medium
- qemu, debian linux +1 morehw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.5.3 Medium
- owasp modsecurity, debian linux +1 more** DISPUTED ** Trustwave ModSecurity 3.x through 3.0.4 allows denial of service via a special...7.5 High
- wolfsslAn issue was discovered in wolfSSL before 4.5.0. It mishandles the change_cipher_spec (CCS)...7.5 High
- ise smart connect knx vaillantise smart connect KNX Vaillant 1.2.839 contain a Denial of Service.7.5 High
- golang go, debian linux, fedoraproject fedora +1 more +3 moreWithdrawn Advisory: Infinite loop in xz7.5 High
- google androidIn Threshold::getHistogram of ImageProcessHelper.java, there is a possible crash loop due to an...5.5 Medium
- grandstream ht801 firmware, ht802 firmware, ht812 firmware +3 more +5 moreGrandstream HT800 series firmware version 1.0.17.5 and below is vulnerable to CPU exhaustion due...7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen in an endless loop, a website specifying a custom cursor using CSS could make it look like...6.5 Medium
- gnu libredwgAn issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of...6.5 Medium
- microsoft bond, bond 9.0.1 +1 moreInfinite loop in .Net Bond7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +15 more +17 moreInfinite Loop in Apache Tomcat7.5 High
- python, canonical ubuntu linux, debian linux +8 more +10 moreIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 High
- wireshark, debian linux, opensuse leap +2 moreIn Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was...7.5 High
- tendacn pa6 firmwareTenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a denial of service, caused by an...7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.23.0. Automatic direct message replies...7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.23.0. Large webhook requests allow...7.5 High
- arm mbed osAn infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is...7.5 High
- Show moreLoading…