Weakness (CWE)
CWE-835: Loop with Unreachable Exit Condition
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Source: MITRE CWE-835
619 results · Feed
-
High 7.5
Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access
Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted "tmp_url".
-
Medium 5.1
pypdf possible Infinite Loop when PdfWriter(clone_from) is used with a PDF
pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions 3.7.0 through 3.16.4 can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single core…
-
Medium 5.9
A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9…
-
High 7.5CVE-2023-45363 EPSS 24%
MediaWiki Denial of Service vulnerability
An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of service (unbounded loop and RequestTimeoutException) when querying pages redirected …
-
Medium 5.3
asyncua vulnerable to denial of service via infinite loop
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory.
-
Medium 5.9
Denial of service from circular relationship definitions in OpenFGA
OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA is vulnerable to a denial of service attack when certain Check calls are executed against authorization models that contain circular relationship defin…
-
High 7.5
Certain WithSecure products allow Denial of Service (infinite loop). This affects WithSecure Client Security 15, WithSe…
-
High 7.5
Undertow: infinite loop in sslconduit during close
A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.
-
Medium 6.5
Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service
A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the `inflate_buffer` function. This could allow a remote authent…
-
Medium 5.3
Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file
-
High 7.7
A vulnerability in the Simple Network Management Protocol (SNMP) service of Cisco FXOS Software for Firepower 4100 Seri…
-
High 7.5
A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauth…
-
High 7.5
FaucetSDN Ryu Denial of Service Vulnerability
An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite loop).
-
High 7.5
FaucetSDN Ryu Denial of Service Vulnerability
An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite loop).
-
Low 3.5
Inifinite loop in babld message parsing may cause dos
A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that…
-
High 7.5CVE-2023-34966 EPSS 62%
Samba: infinite loop in mdssvc rpc service for spotlight
An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not validate a field in the network packet that contains t…
-
High 7.5
An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infini…
-
Medium 6.2
Infinite Loop when reading malformed objects in pypdf
pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In version 2.10.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This infinite loop blocks the curre…
-
Medium 6.8
A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) an…
-
Medium 6.2
Infinite Loop when a comment isn't followed by a character in pypdf
pypdf is an open source, pure-python PDF library. In affected versions an attacker may craft a PDF which leads to an infinite loop if `__parse_content_stream` is executed. That is, for example, the case if the user extracted text from such a PDF. This issue w…
-
Medium 5.9
OpenFGA denial of service die to circular relationship
OPenFGA is an open source authorization/permission engine built for developers. OpenFGA versions v1.1.0 and prior are vulnerable to a DoS attack when Check and ListObjects calls are executed against authorization models that contain circular relationship defi…
-
Medium 4.9
A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS versi…
-
Medium 5.3
XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injecti…
-
Medium 6.3
GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or cr…
-
Medium 5.5
An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop.
-
Low 2.8
InternalError503 Forget It settings.js infinite loop
A vulnerability, which was classified as problematic, was found in InternalError503 Forget It up to 1.3. This affects an unknown part of the file js/settings.js. The manipulation of the argument setForgetTime with the input 0 leads to infinite loop. It is pos…
-
High 7.5
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified…
-
Medium 5.5
In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Th…
-
Medium 5.5
In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Th…
-
Medium 5.5
In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Th…
-
Medium 5.5
In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. Th…
-
High 7.5
phpseclib Infinite Loop vulnerability
Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields.
-
High 7.5
mod_gnutls contains Infinite Loop on request read timeout
Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. Versions from 0.9.0 to 0.12.0 (including) did not properly fail blocking read operations on TLS connections when the transport hit timeouts. Instead it entered an endless loop retrying the read oper…
-
High 7.5
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-based servers. Prior to version 2.2.0, when using the non-default "fallback" crypto back-end, ECC operations in `node-jose` can trigger a De…
-
High 7.5
Loop with Unreachable Exit Condition in MODEM
Denial of service in modem due to missing null check while processing IP packets with padding
-
Medium 5.3
Denial Of Service when opening a corrupt PDF file in pdfio
PDFio is a C library for reading and writing PDF files. In versions prior to 1.1.0 a denial of service (DOS) vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. The pdf which causes…
-
High 7.5
A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition …
-
Medium 4.9
OpenMage LTS has DoS vulnerability in MaliciousCode filter
OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code filter in certain conditions. Versions 19.4.22 and 20.0.19 have a fix for this issue. There are no known workarounds.
-
Medium 5.5
When a file is processed, an infinite loop occurs in next_inline() of the more_curly() function.
-
High 8.6
A vulnerability in the Device Management Servlet application of Cisco BroadWorks Application Delivery Platform and Cisc…