CWE-835 · Loop with Unreachable Exit Condition (Infinite Loop) (page 5)
Page 5 of 10 — CVEs classified under CWE-835, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-50981 | High | 7.5 | 2023-12-18 | ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (infinite loop) via crafted DER public-key data associ… |
CVE-2023-6245 | High | 7.5 | 2023-12-08 | The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For example, if the payload is `record { *… |
CVE-2023-40458 | High | 7.5 | 2023-11-29 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Sierra Wireless, Inc ALEOS could potentially allow a remote attacker to trigger a Deni… |
CVE-2023-42815 | Low | 3.1 | 2023-11-13 | Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker could cause denial of service of Kyverno. T… |
CVE-2023-42814 | Low | 3.1 | 2023-11-13 | Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker could cause denial of service of Kyverno. T… |
CVE-2023-46737 | Low | 3.1 | 2023-11-07 | Cosign is a sigstore signing tool for OCI containers. Cosign is susceptible to a denial of service by an attacker controlled registry. An attacker who controls… |
CVE-2023-5825 | Medium | 6.5 | 2023-11-06 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versio… |
CVE-2023-20083 | High | 8.6 | 2023-11-01 | A vulnerability in ICMPv6 inspection when configured with the Snort 2 detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthe… |
CVE-2023-1718 | High | 7.5 | 2023-11-01 | Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-se… |
CVE-2023-46250 | Medium | 5.1 | 2023-10-31 | pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions 3.7.0 through 3.16.4 can craft a PDF which le… |
CVE-2023-44181 | High | 7.5 | 2023-10-13 | An Improperly Implemented Security Check for Standard vulnerability in storm control of Juniper Networks Junos OS QFX5k devices allows packets to be punted to… |
CVE-2023-22325 | Medium | 5.9 | 2023-10-12 | A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A speciall… |
CVE-2023-43786 | Medium | 5.5 | 2023-10-10 | A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system re… |
CVE-2023-45363 | High | 7.5 | 2023-10-09 | An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to ca… |
CVE-2023-26151 | Medium | 5.3 | 2023-10-03 | Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the… |
CVE-2023-43645 | Medium | 5.9 | 2023-09-27 | OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA is vulnerable to a denial of service attack when ce… |
CVE-2023-43761 | High | 7.5 | 2023-09-22 | Certain WithSecure products allow Denial of Service (infinite loop). This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Emai… |
CVE-2023-42525 | High | 7.5 | 2023-09-18 | Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Serv… |
CVE-2023-42524 | High | 7.5 | 2023-09-18 | Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithSecure Serv… |
CVE-2023-1108 | High | 7.5 | 2023-09-14 | A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the lo… |
CVE-2023-3255 | Medium | 6.5 | 2023-09-13 | A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an… |
CVE-2023-4511 | Medium | 5.3 | 2023-08-24 | BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injection or crafted capture file |
CVE-2023-20200 | High | 7.7 | 2023-08-23 | A vulnerability in the Simple Network Management Protocol (SNMP) service of Cisco FXOS Software for Firepower 4100 Series and Firepower 9300 Security Appliance… |
CVE-2022-40090 | Medium | 6.5 | 2023-08-22 | An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file. |
CVE-2023-20197 | High | 7.5 | 2023-08-16 | A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a de… |
CVE-2023-30188 | High | 7.5 | 2023-08-14 | Memory Exhaustion vulnerability in ONLYOFFICE Document Server 4.0.3 through 7.3.2 allows remote attackers to cause a denial of service via crafted JavaScript f… |
CVE-2020-36023 | Medium | 6.5 | 2023-08-11 | An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C… |
CVE-2020-35141 | High | 7.5 | 2023-08-11 | An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infi… |
CVE-2020-35139 | High | 7.5 | 2023-08-11 | An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite l… |
CVE-2020-24221 | Medium | 5.5 | 2023-08-11 | An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service (DoS) via crafted .gif file (i… |
CVE-2023-3748 | Low | 3.5 | 2023-07-24 | A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send spec… |
CVE-2023-34966 | High | 7.5 | 2023-07-20 | An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core un… |
CVE-2023-37748 | Medium | 5.5 | 2023-07-19 | ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c. |
CVE-2021-33294 | Medium | 5.5 | 2023-07-18 | In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) v… |
CVE-2023-38197 | High | 7.5 | 2023-07-13 | An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expansion. |
CVE-2023-36807 | Medium | 6.2 | 2023-06-30 | pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In version 2.10.5 an attacker who uses thi… |
CVE-2023-20116 | Medium | 6.8 | 2023-06-28 | A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager S… |
CVE-2023-36464 | Medium | 6.2 | 2023-06-27 | pypdf is an open source, pure-python PDF library. In affected versions an attacker may craft a PDF which leads to an infinite loop if `__parse_content_stream`… |
CVE-2023-35933 | Medium | 5.9 | 2023-06-26 | OPenFGA is an open source authorization/permission engine built for developers. OpenFGA versions v1.1.0 and prior are vulnerable to a DoS attack when Check and… |
CVE-2023-33305 | Medium | 4.9 | 2023-06-13 | A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0.0 through 7.0.10, FortiOS 6.4 all… |
CVE-2023-2952 | Medium | 5.3 | 2023-05-30 | XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file |
CVE-2023-2879 | Medium | 6.3 | 2023-05-26 | GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file |
CVE-2023-30300 | Medium | 5.5 | 2023-05-03 | An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop. |
CVE-2015-10103 | Low | 2.8 | 2023-04-17 | A vulnerability, which was classified as problematic, was found in InternalError503 Forget It up to 1.3. This affects an unknown part of the file js/settings.j… |
CVE-2022-37013 | High | 7.5 | 2023-03-29 | This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C++ Demo Server 1.7.6… |
CVE-2023-20999 | Medium | 5.5 | 2023-03-24 | In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service… |
CVE-2023-20998 | Medium | 5.5 | 2023-03-24 | In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service… |
CVE-2023-20997 | Medium | 5.5 | 2023-03-24 | In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service… |
CVE-2023-20996 | Medium | 5.5 | 2023-03-24 | In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service… |
CVE-2023-27560 | High | 7.5 | 2023-03-03 | Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields. |
CVE-2023-25824 | High | 7.5 | 2023-02-23 | Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. Versions from 0.9.0 to 0.12.0 (including) did not properly fail blocking read operations on TLS co… |
CVE-2023-25653 | High | 7.5 | 2023-02-16 | node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-based servers. Prior to version 2.2.0, w… |
CVE-2022-25734 | High | 7.5 | 2023-02-12 | Denial of service in modem due to missing null check while processing IP packets with padding |
CVE-2022-46285 | High | 7.5 | 2023-02-07 | A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infi… |
CVE-2023-24808 | Medium | 5.3 | 2023-02-07 | PDFio is a C library for reading and writing PDF files. In versions prior to 1.1.0 a denial of service (DOS) vulnerability exists in the pdfio parser. Crafted… |
CVE-2022-44617 | High | 7.5 | 2023-02-06 | A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and can lead to an… |
CVE-2023-23617 | Medium | 4.9 | 2023-01-28 | OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code filter in certain conditions. Versions… |
CVE-2021-33642 | Medium | 5.5 | 2023-01-20 | When a file is processed, an infinite loop occurs in next_inline() of the more_curly() function. |
CVE-2023-20020 | High | 8.6 | 2023-01-20 | A vulnerability in the Device Management Servlet application of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform c… |
CVE-2022-48256 | High | 7.5 | 2023-01-13 | Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to contain hundreds of records. |
CVE-2022-4345 | Medium | 6.3 | 2023-01-12 | Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injectio… |
CVE-2013-10005 | High | 7.5 | 2022-12-27 | The RemoteAddr and LocalAddr methods on the returned net.Conn may call themselves, leading to an infinite loop which will crash the program due to a stack over… |
CVE-2022-33238 | High | 7.5 | 2022-12-13 | Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon C… |
CVE-2022-20476 | Medium | 5.5 | 2022-12-13 | In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This could lead… |
CVE-2022-46770 | High | 7.5 | 2022-12-07 | qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of for… |
CVE-2022-4104 | Medium | 5.5 | 2022-11-28 | A loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compression tool, resulting in a denial-of-servic… |
CVE-2022-33239 | High | 7.5 | 2022-11-15 | Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2022-25742 | High | 7.5 | 2022-11-15 | Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice… |
CVE-2022-39052 | High | 7.5 | 2022-10-17 | An external attacker is able to send a specially crafted email (with many recipients) and trigger a potential DoS of the system |
CVE-2022-42721 | Medium | 5.5 | 2022-10-14 | A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inj… |
CVE-2014-0148 | Medium | 5.5 | 2022-09-29 | Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bo… |
CVE-2022-31628 | Low | 2.3 | 2022-09-28 | In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop. |
CVE-2022-28886 | Medium | 4.3 | 2022-09-23 | A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking P… |
CVE-2022-3252 | High | 7.5 | 2022-09-21 | Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or resp… |
CVE-2022-3190 | Medium | 6.3 | 2022-09-13 | Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or cr… |
CVE-2021-37819 | High | 7.5 | 2022-09-09 | PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java. |
CVE-2022-28884 | Medium | 4.3 | 2022-09-06 | A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files… |
CVE-2021-44718 | Medium | 5.9 | 2022-09-02 | wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-th… |
CVE-2022-28882 | Medium | 4.3 | 2022-08-23 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE… |
CVE-2022-37768 | High | 7.5 | 2022-08-18 | libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer. |
CVE-2022-35166 | Medium | 5.5 | 2022-08-18 | libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal. |
CVE-2022-35165 | Medium | 5.5 | 2022-08-18 | An issue in AP4_SgpdAtom::AP4_SgpdAtom() of Bento4-1.6.0-639 allows attackers to cause a Denial of Service (DoS) via a crafted mp4 input. |
CVE-2020-14394 | Low | 3.2 | 2022-08-17 | An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw all… |
CVE-2022-2833 | High | 7.5 | 2022-08-16 | Endless Infinite loop in Blender-thumnailing due to logical bugs. |
CVE-2022-34661 | High | 7.5 | 2022-08-10 | A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamcenter V13.1 (All versio… |
CVE-2022-35724 | High | 7.5 | 2022-08-09 | It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications using Apache A… |
CVE-2022-34862 | High | 7.5 | 2022-08-04 | In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when an LTM virtual server is configured t… |
CVE-2022-36313 | Medium | 5.5 | 2022-07-21 | An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js. A malformed MKV file could cause the file type detector to g… |
CVE-2021-46828 | High | 7.5 | 2022-07-20 | In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. T… |
CVE-2022-30634 | High | 7.5 | 2022-07-15 | Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 <… |
CVE-2022-34760 | High | 7.5 | 2022-07-13 | A CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists that could cause a denial of service of the webserver due to improper ha… |
CVE-2022-32058 | High | 7.5 | 2022-07-07 | An infinite loop in the function httpRpmPass of TP-Link TL-WR741N/TL-WR742N V1/V2/V3_130415 allows attackers to cause a Denial of Service (DoS) via a crafted p… |
CVE-2022-29862 | High | 7.5 | 2022-06-16 | An infinite loop in OPC UA .NET Standard Stack 1.04.368 allows a remote attackers to cause the application to hang via a crafted message. |
CVE-2022-25851 | High | 7.5 | 2022-06-10 | The package jpeg-js before 0.4.4 are vulnerable to Denial of Service (DoS) where a particular piece of input will cause to enter an infinite loop and never ret… |
CVE-2021-40592 | Medium | 5.5 | 2022-06-08 | GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a (version v1.0.1 onwards) contains loop with unreachable exit condition ('infinite loop') vu… |
CVE-2022-27781 | High | 7.5 | 2022-06-02 | libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous fu… |
CVE-2022-29190 | High | 7.5 | 2022-05-21 | Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, an attacker can send packets that sends Pion DTLS into an infini… |
CVE-2022-29028 | Medium | 5.5 | 2022-05-20 | A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V1… |
CVE-2022-24792 | High | 7.5 | 2022-04-25 | PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit systems that… |
CVE-2022-24859 | Medium | 6.2 | 2022-04-18 | PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.27.5 an at… |