CWE-834 · Excessive Iteration (page 2)
Page 2 of 2 — CVEs classified under CWE-834, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-12674 | Medium | 6.5 | 2017-08-07 | In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of serv… |
CVE-2017-12587 | High | 8.8 | 2017-08-06 | ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c. |
CVE-2017-11549 | Medium | 5.5 | 2017-07-31 | The play_midi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted m… |
CVE-2017-11505 | Medium | 6.5 | 2017-07-21 | The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large… |
CVE-2017-11409 | High | 7.5 | 2017-07-18 | In Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop. This was addressed in epan/dissectors/packet-gprs-llc.c by using a different i… |
CVE-2017-11360 | Medium | 6.5 | 2017-07-17 | The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge number_pixels value. |
CVE-2017-11188 | High | 7.5 | 2017-07-12 | The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related t… |
CVE-2017-9257 | Medium | 5.5 | 2017-06-27 | The mp4ff_read_ctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (l… |
CVE-2017-9256 | Medium | 5.5 | 2017-06-27 | The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (l… |
CVE-2017-9255 | Medium | 5.5 | 2017-06-27 | The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (l… |
CVE-2017-9254 | Medium | 5.5 | 2017-06-27 | The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (l… |
CVE-2017-9253 | Medium | 5.5 | 2017-06-27 | The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (l… |
CVE-2017-2330 | Medium | 6.2 | 2017-04-24 | A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, loca… |
CVE-2016-7421 | Medium | 4.4 | 2016-12-10 | The pvscsi_ring_pop_req_descr function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (… |