CWE-835: Loop with Unreachable Exit Condition
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Also known as Infinite Loop.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- nmap project nmapNmap 7.99 Denial of Service via Zero-Length TCP Option Packet6.9 Medium
- linuxaudit: fix recursive locking deadlock in audit_dupe_exe()7.5 High
- legion of the bouncy castle inc. bc-fjaNative entropy source retries the CPU entropy instructions without limit8.7 High
- mermaid-js mermaidMermaid XY Charts are vulnerable to an infinite loop DoS5.3 Medium
- smuellerdd libkcapi, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 moreLibkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return5.1 Medium
- zephyrproject zephyrMissing hop-limit decrement on IPv6 forwarding path allows unbounded packet looping (DoS) in Zephyr routers5.8 Medium
- uhop node-re2re2: Global `String.prototype.match` with an empty-matchable pattern never advances → infinite loop with unbounded native memory growth (DoS)6.2 Medium
- nanoid project nanoidnanoid Infinite Loop via Negative Size in non-secure module8.2 High
- nanoid project nanoidnanoid before 5.1.6 Infinite Loop via Zero Size in customAlphabet and customRandom8.2 High
- zephyrproject zephyrDesignWare I2C target driver can be wedged into a permanent stuck state by an on-bus master (DoS)2.4 Low
- boazsegev facil.iofacil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body Parser8.7 High
- apache thriftApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit8.7 High
- linux, linux kernel +1 morevfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc5.5 Medium
- linux, linux kernel +1 moreBluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()5.5 Medium
- linux, linux kernel +1 moresched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT7.5 High
- linux, linux kernel +1 mores390: Revert support for DCACHE_WORD_ACCESS5.5 Medium
- linux, linux kernel +1 moreiommufd: Break the loop on failure in iommufd_fault_fops_read()5.5 Medium
- phpoffice phpspreadsheetPhpSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion7.5 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreLibcupsfilters: cups-filters: libcupsfilters: cpu exhaustion via infinite loop in cfieee1284normalizemakemodel()7.5 High
- ffmpegFFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer8.7 High
- thinkst opencanaryDenial-of-Service in OpenCanary's MongoDB module6.9 Medium
- 101arrowz fflatefflate unzipSync can enter an infinite loop when parsing malformed ZIP64 archives6.6 Medium
- libssh, red hat enterprise linux 10, enterprise linux 8 +11 more +13 moreLibssh: libssh: denial of service via automatic certificate authentication loop3.1 Low
- libssh, red hat enterprise linux 10, enterprise linux 8 +3 more +5 moreLibssh: libssh: denial of service via zero advertised channel packet size6.5 Medium
- neutrinolabs xrdpxrdp: Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER7.5 High
- linux, linux kernel +1 morepds_core: fix error handling in pdsc_devcmd_wait7.5 High
- linux, linux kernel +1 moreipv6: fix possible infinite loop in rt6_fill_node()5.5 Medium
- linux, linux kernel +1 moreipv6: fix possible infinite loop in fib6_select_path()7.5 High
- linux, linux kernel +1 moreInput: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem5.5 Medium
- linux, linux kernel +1 morescsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker5.5 Medium
- linux, linux kernel +1 morescsi: scsi_transport_fc: Widen FPIN pname walker counter to u328.1 High
- ibm db2IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service5.5 Medium
- codechild xml::bareXML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes7.5 High
- codechild html::bareHTML::Bare versions through 0.04 for Perl will hang in an infinite loop when parsing malformed attributes7.5 High
- golang.org/x/text golang.org/x/text/unicode/normInfinite loop on invalid input in golang.org/x/text7.5 High
- microsoft .net framework, .net framework 3.5 and 4.7.2, .net framework 3.5 and 4.8 +29 more +31 moreActive Directory Federation Server Denial of Service Vulnerability7.5 High
- microsoft .net framework 3.5 and 4.7.2, .net framework 3.5 and 4.8, .net framework 3.5 and 4.8.1 +17 more +19 moreWindows Active Directory Federation Services Denial of Service Vulnerability5.9 Medium
- microsoft azure active directory, .net framework, .net framework 3.5 +6 more +8 moreAzure Active Directory Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Active Directory Denial of Service Vulnerability7.5 High
- bulwarkmail webmailIn Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the...4.3 Medium
- python pillowPillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service5.3 Medium
json-repairPyPIjson_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS7.5 High- gnu patchLoop with Unreachable Exit Condition in GNU patch4.6 Medium
- wiresharkLoop with Unreachable Exit Condition ('Infinite Loop') in Wireshark5.5 Medium
- py-pdf pypdfpypdf: Possible infinite loop for not terminated inline images8.7 High
- py-pdf pypdfpypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)8.7 High
- immutable-js immutable, immutable-js +1 moreImmutable.js `List` 32-bit trie overflow → unrecoverable DoS8.7 High
- protobufjs project protobufjs, protobufjs protobuf.js +1 moreprotobufjs: Denial of Service via infinite loop in .proto option parsing5.3 Medium
- isaacs node-tar, tar +1 morenode-tar: Negative tar entry size causes infinite loop in archive replace8.7 High
- academysoftwarefoundation openexrOpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts6.2 Medium
- Show moreLoading…