CWE-835: Loop with Unreachable Exit Condition
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Also known as Infinite Loop.
A kind of CWE-834 Excessive Iteration.
From the CWE List. © The MITRE Corporation.
Newest
- rejetto hfs2HFS2 2.4.0 Unauthenticated Denial of Service via Hung Serving Thread8.7 High
pgbouncerAzure LinuxInteger overflow causes an infinite loop in packet buffer growth in PgBouncer7.5 High- radare radare2radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser5.5 Medium
libnet-idn-encode-perlDebian,perl-Net-IDN-EncodeopenSUSE +1 moreNet::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode7.5 HighperlAlpaquita,perl-podlatorsopenEuler,rootio-perlRoot +2 morePod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width7.5 High- nanomqNanoMQ: Infinite Loop in UNSUBSCRIBE Decoder Leading to Remote DoS2.0 Low
- garycourt uri-jsuri-js through 4.4.1 Denial of Service via removeDotSegments8.7 High
- mattiasw exifreaderExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustion7.5 High
- cisco secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software +1 moreCisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Service8.6 High
- ronf asyncsshAsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION6.5 Medium
- hapifhir org.hl7.fhir.coreHAPI FHIR: SHCParser DEFLATE infinite loop causes denial of service7.5 High
- reactphp httpreact/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPU7.5 High
- http4sHttp4s: WebSocket decoder accepts negative length, causing infinite decode loop7.5 High
- freerdpFreeRDP before 3.31.0 Denial of Service via pool_decode_rect7.1 High
- zephyrproject zephyrInfinite loop denial of service in Zephyr SDIO byte-I/O from a card-supplied zero max_blk_size4.6 Medium
- luben zstd-jnizstd-jni 1.4.8-4 through 1.5.7-13 Denial of Service via Negative Length5.1 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Any authenticated user can hang the server via a cyclic chat message history6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle4.3 Medium
- strukturag libheiflibheif: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_frames7.5 High
- strongswanstrongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate...7.5 High
- strongswanstrongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.5.9 Medium
- the tcpdump group libpcapinfinte loop in libpcap before 1.10.77.5 High
- ibm app connect enterprise, integration bus for z/os, integration bus for z\/os +2 moreIBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs5.3 Medium
- hickory-dnsHickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop8.7 High
- py-pdf pypdfpypdf: Possible infinite loop for TreeObject.insert_child6.9 Medium
- barebones bbeditBareBones BBEdit Lasso Language Tokenizer infinite loop5.3 Medium
- ash-project ash aiAshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service6.0 Medium
- the gnu c library glibcEUC_JISX0213 decoding may hang on crafted input5.9 Medium
- the gnu c library glibcSHIFT_JISX0213 decoding may hang on crafted input5.9 Medium
- broadcom reactor coreReactor Core bufferTimeout fair-backpressure pipeline permanently hangs when upstream delivers items during an active flush5.9 Medium
- spring amqp, vmware spring advanced message queuing protocol +1 moreUnbounded decompression of attacker-supplied compressed message bodies6.5 Medium
- gitlabLoop with Unreachable Exit Condition ('Infinite Loop') in GitLab6.5 Medium
- deislabs orasORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption6.5 Medium
- bytebot-ai bytebotbytebot-ai bytebot Agent Execution Workflow infinite loop5.3 Medium
- h2o picotlspicotls has infinite recursion in the minicrypto ASN.1 decoder5.5 Medium
io.netty.incubator:netty-incubator-codec-bhttpMavennetty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding7.5 Highio.netty.incubator:netty-incubator-codec-bhttpMavennetty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundary7.5 High- django cms association django-cmsdjango CMS: Plugin move endpoint allows cyclic reparenting (DoS)7.1 High
- harttle liquidjsLiquidJS: An infinite loop vulnerability in `strip_html` filter8.7 High
- zephyrproject zephyrPL011 UART error interrupts never cleared, enabling an external-peer interrupt-storm denial of service4.6 Medium
- jetbrains ktorIn JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible5.9 Medium
- ibm iIBM i is Affected By Multiple Vulnerabilities in Host Servers7.5 High
- ibm iIBM i is Affected By Multiple Vulnerabilities in Host Servers7.5 High
- zephyrproject zephyrInfinite loop (DoS) in Bluetooth GATT client parsing of Read-By-Type responses with zero data length6.5 Medium
- rsyncproject rsyncrsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT7.1 High
- @fastify/busboy, fastify fastify\/busyboy +1 more@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary7.5 High
- red hat enterprise linux 10, enterprise linux 9, redhat enterprise linux +2 moreOpen-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing6.5 Medium
- ibm security verify access, verify identity access, verify identity access container +1 more +3 moreSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access5.3 Medium
- ibm iIBM i is Affected By A Denial of Service Vulnerability []7.5 High
- Show moreLoading…