CWE-835: Loop with Unreachable Exit Condition
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Also known as Infinite Loop.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- fulgur-rs fulgurFulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service7.5 High
- fulgur-rs fulgurFulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service7.5 High
- erlang otp, erlang\/otp, erlang\/ssh +2 moreSSH SFTP server denial of service via extended channel data infinite loop5.3 Medium
- imagemagickImageMagick: Infinite Loop in connected-components when providing invalid arguments4.7 Medium
- chan fatfsFatFs Infinite Loop in GPT Partition Scan4.6 Medium
- red hat enterprise linux 10Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling6.5 Medium
- linux, linux kernel +1 moreiommu/riscv: Remove overflows on the invalidation path5.5 Medium
- linux, linux kernel +1 moretimers/migration: Fix livelock in tmigr_handle_remote_up()7.5 High
- zephyrproject zephyrUnbounded TX busy-loop DoS in Zephyr PL011 UART driver under CTS hardware flow control6.5 Medium
- linux, linux kernel +1 moredrm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure5.5 Medium
- curlQUIC zero-length UDP datagrams busy-loop7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreio_uring/poll: fix signed comparison in io_poll_get_ownership()7.8 High
- linux, linux kernel +1 morenetfilter: ipset: stop hash:* range iteration at end5.5 Medium
- py-pdf pypdfpypdf: Possible infinite loop when processing threads/articles in writer6.9 Medium
- ruby-concurrency concurrent-ruby, rubyconcurrency concurrent ruby +1 moreconcurrent-ruby: `AtomicReference#update` livelocks when the stored value is `Float::NAN`8.2 High
- corewcfCoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshake7.5 High
- jg-rp liquidPython Liquid: Infinite loop when parsing malformed `{% case %}` tags7.1 High
- mcdope pam usbpam_usb: Infinite loop DoS in process-tree walk when parent process exits during authentication4.7 Medium
- libssh2libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler8.2 High
- rxi microtarInteger Overflow in rxi/microtar mtar_next() Causes Infinite Loop DoS8.7 High
- py-pdf pypdfpypdf: Possible infinite loop when processing outlines/bookmarks in writer6.9 Medium
- py-pdf pypdfpypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction6.9 Medium
- image-sizeimage-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser8.7 High
- image-sizeimage-size 2.0.2 Denial of Service via Malformed ICNS Image Parsing8.7 High
- nationalsecurityagency ghidraGhidra 10.2 < 12.1 - Denial of Service via Circular Reference in Mach-O Export Trie Parser6.7 Medium
- linux, linux kernel +1 moredrm/v3d: Reject empty multisync extension to prevent infinite loop5.5 Medium
- apache http serverApache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp7.3 High
- imagemagickImageMagick: Infinite Loop in subimage-search with crafted image4.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGlib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chain4.3 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()5.5 Medium
- linux, linux kernel +1 moreceph: only d_add() negative dentries when they are unhashed7.5 High
- linux, linux kernel +1 moresched/rt: Skip currently executing CPU in rto_next_cpu()5.5 Medium
- linux, linux kernel +1 morefs/ntfs3: prevent infinite loops caused by the next valid being the same5.5 Medium
- openstack swiftOpenStack Swift: s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body7.1 High
- benoitc hackneyInfinite loop in Alt-Svc header parser in hackney8.7 High
github.com/opentofu/opentofuGoOpenTofu: Excessive resource usage in "tofu init" when installing dependencies from attacker-controlled server3.1 Low- tomwright daselDasel: Denial of service in dasel selector lexer due to infinite loop on unterminated regex literal6.2 Medium
- ironfede openmcdfOpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycle6.2 Medium
- struktur libheiflibheif is Vulnerable to Infinite Loop DoS via stts Sample Duration Lookup6.5 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion7.5 High
- imagemagickImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression5.5 Medium
- hamba avro, red hat cryostat 4 on rhel 9, multicluster global hub 1.4.5 +11 more +13 moreiskorotkov/avro: CPU Exhaustion in Avro Decoder8.7 High
- go-git go-billygo-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion6.5 Medium
- linux, linux kernel +1 morearm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults5.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP DTLS Vulnerability8.7 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP FastL4 virtual server vulnerability7.1 High
- mtrudel banditHTTP/1 chunked decoder infinite loop on requests with trailer fields in bandit8.7 High
- microsoft .net, .net 10.0, .net 8.0 +8 more +10 moreASP.NET Core Denial of Service Vulnerability7.5 High
- bareboxbarebox ext4 Directory Parsing Infinite Loop Denial of Service6.9 Medium
- mermaid-js mermaidMermaid Gantt Charts are vulnerable to an Infinite Loop DoS5.3 Medium
- Show moreLoading…