CWE-835 · Loop with Unreachable Exit Condition (Infinite Loop) (page 8)
Page 8 of 10 — CVEs classified under CWE-835, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10898 | High | 7.5 | 2019-04-09 | In Wireshark 3.0.0, the GSUP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gsm_gsup.c by rejecting an invalid Informat… |
CVE-2019-10897 | High | 7.5 | 2019-04-09 | In Wireshark 3.0.0, the IEEE 802.11 dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-ieee80211.c by detecting cases in wh… |
CVE-2018-16789 | High | 7.5 | 2019-03-21 | libhttp/url.c in shellinabox through 2.20 has an implementation flaw in the HTTP request parsing logic. By sending a crafted multipart/form-data HTTP request… |
CVE-2019-3833 | High | 7.5 | 2019-03-14 | Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote… |
CVE-2019-9747 | High | 7.5 | 2019-03-13 | In tinysvcmdns through 2018-01-16, a maliciously crafted mDNS (Multicast DNS) packet triggers an infinite loop while parsing an mDNS query. When mDNS compresse… |
CVE-2019-6594 | Medium | 5.9 | 2019-02-26 | On BIG-IP 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, and 14.0.0-14.0.0.2, Multi-Path TCP (MPTCP) does not protect against multiple zero length DA… |
CVE-2018-20784 | Critical | 9.8 | 2019-02-22 | In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_b… |
CVE-2018-6687 | Medium | 5.5 | 2019-02-21 | Loop with Unreachable Exit Condition ('Infinite Loop') in McAfee GetSusp (GetSusp) 3.0.0.461 and earlier allows attackers to DoS a manual GetSusp scan via whil… |
CVE-2018-5818 | High | 7.5 | 2019-02-20 | An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop. |
CVE-2019-1000020 | Medium | 6.5 | 2019-02-04 | libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition ('… |
CVE-2017-18361 | High | 7.5 | 2019-02-01 | In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed… |
CVE-2019-3819 | Medium | 4.4 | 2019-01-25 | A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain para… |
CVE-2019-6462 | Medium | 6.5 | 2019-01-16 | An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file cairo-arc.c, related to _arc_max_angle_for… |
CVE-2019-3573 | Medium | 5.5 | 2019-01-02 | In libsixel v1.8.2, there is an infinite loop in the function sixel_decode_raw_impl() in the file fromsixel.c, as demonstrated by sixel2png. |
CVE-2018-20578 | High | 7.5 | 2018-12-28 | An issue was discovered in NuttX before 7.27. The function netlib_parsehttpurl() in apps/netutils/netlib/netlib_parsehttpurl.c mishandles URLs longer than host… |
CVE-2018-20482 | Medium | 4.7 | 2018-12-26 | GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read… |
CVE-2018-20467 | Medium | 6.5 | 2018-12-26 | In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers c… |
CVE-2018-17197 | Medium | 6.5 | 2018-12-24 | A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika. |
CVE-2018-20348 | Medium | 5.5 | 2018-12-22 | libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) vi… |
CVE-2018-20216 | High | 7.5 | 2018-12-20 | QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishandled). |
CVE-2018-20021 | High | 7.5 | 2018-12-19 | LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code. Vulnerability allows attacker… |
CVE-2018-20103 | High | 7.5 | 2018-12-12 | An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the… |
CVE-2018-20099 | Medium | 6.5 | 2018-12-12 | There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack. |
CVE-2018-1000864 | Medium | 6.5 | 2018-12-10 | A denial of service vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in CronTab.java that allows attackers with Overall/Read permissi… |
CVE-2018-5813 | Medium | 6.5 | 2018-12-07 | An error within the "parse_minolta()" function (dcraw/dcraw.c) in LibRaw versions prior to 0.18.11 can be exploited to trigger an infinite loop via a specially… |
CVE-2017-15835 | Medium | 6.5 | 2018-12-07 | In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, While processing the RIC Data Descriptor IE in an ar… |
CVE-2018-19840 | Medium | 5.5 | 2018-12-04 | The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (resource exhaustion caused… |
CVE-2018-19826 | Medium | 6.5 | 2018-12-03 | In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop (containing a Sass::Inspect::operator()(Sass::String_Quoted*) stack frame) m… |
CVE-2018-19777 | Medium | 5.5 | 2018-11-30 | In Artifex MuPDF 1.14.0, there is an infinite loop in the function svg_dev_end_tile in fitz/svg-device.c, as demonstrated by mutool. |
CVE-2018-19622 | High | 7.5 | 2018-11-29 | In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-mmse.c by prev… |
CVE-2018-14629 | Medium | 6.5 | 2018-11-28 | A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion… |
CVE-2018-19108 | Medium | 6.5 | 2018-11-08 | In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) caused by an integer o… |
CVE-2018-16845 | Medium | 6.1 | 2018-11-07 | nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process… |
CVE-2018-9444 | Medium | 5.5 | 2018-11-06 | In ih264d_video_decode of ih264d_api.c there is a possible resource exhaustion due to an infinite loop. This could lead to remote temporary device denial of se… |
CVE-2018-18915 | Medium | 6.5 | 2018-11-03 | There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of servi… |
CVE-2018-18701 | Medium | 5.5 | 2018-10-29 | An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infin… |
CVE-2018-18700 | Medium | 5.5 | 2018-10-29 | An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infin… |
CVE-2017-18277 | Medium | 5.5 | 2018-10-23 | When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop without retrying for memory allocation in Sn… |
CVE-2018-18385 | High | 7.5 | 2018-10-16 | Asciidoctor in versions < 1.5.8 allows remote attackers to cause a denial of service (infinite loop). The loop was caused by the fact that Parser.next_block wa… |
CVE-2018-12154 | Medium | 5.5 | 2018-10-15 | Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058… |
CVE-2018-6977 | Medium | 6.5 | 2018-10-09 | VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infinite loop in a 3D-r… |
CVE-2018-18070 | Medium | 5.9 | 2018-10-09 | An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining or receiving a specific navigation route… |
CVE-2018-18024 | Medium | 6.5 | 2018-10-07 | In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerabilit… |
CVE-2018-17846 | High | 7.5 | 2018-10-01 | The html package (aka x/net/html) through 2018-09-25 in Go mishandles <table><math><select><mi><select></table>, leading to an infinite loop during an html.Par… |
CVE-2018-8017 | Medium | 5.5 | 2018-09-19 | In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser. |
CVE-2018-17042 | Medium | 5.5 | 2018-09-14 | An issue has been found in dbf2txt through 2012-07-19. It is a infinite loop. |
CVE-2018-16646 | Medium | 6.5 | 2018-09-06 | In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS at… |
CVE-2018-14621 | Medium | 5.3 | 2018-08-30 | An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2. With the port to using poll rather than select, exhaustion of file descriptors w… |
CVE-2018-10938 | Medium | 5.9 | 2018-08-27 | A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel t… |
CVE-2018-15856 | Medium | 5.5 | 2018-08-25 | An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause… |
CVE-2018-1999044 | Medium | 6.5 | 2018-08-23 | A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in CronTab.java that allows attackers with Overall/Read permission t… |
CVE-2018-14567 | Medium | 6.5 | 2018-08-16 | libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_… |
CVE-2018-11771 | Medium | 5.5 | 2018-08-16 | When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputStream can fail to return the correct EOF… |
CVE-2018-1336 | High | 7.5 | 2018-08-02 | An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Ver… |
CVE-2016-9581 | Low | 3.3 | 2018-08-01 | An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2. |
CVE-2017-2646 | High | 7.5 | 2018-07-27 | It was found that when Keycloak before 2.5.5 receives a Logout request with a Extensions in the middle of the request, the SAMLSloRequestParser.parse() method… |
CVE-2017-2670 | High | 7.5 | 2018-07-27 | It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effectively causing DoS. |
CVE-2018-10912 | Medium | 4.9 | 2018-07-23 | keycloak before version 4.0.0.final is vulnerable to a infinite loop in session replacement. A Keycloak cluster with multiple nodes could mishandle an expired… |
CVE-2018-1999012 | Medium | 6.5 | 2018-07-23 | FFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop vulnerability in pva format demuxer that can result in a Vulner… |
CVE-2018-14445 | Medium | 6.5 | 2018-07-20 | In Bento4 v1.5.1-624, AP4_File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 file. |
CVE-2018-14368 | High | 7.5 | 2018-07-19 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/diss… |
CVE-2018-14341 | High | 7.5 | 2018-07-19 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissec… |
CVE-2018-14339 | High | 7.5 | 2018-07-19 | In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by addi… |
CVE-2018-14347 | Medium | 6.5 | 2018-07-17 | GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTOR_mpeg_extract_method (mpeg_extractor.c). |
CVE-2018-14051 | High | 7.5 | 2018-07-13 | The function wav_read in libwav.c in libwav through 2017-04-20 has an infinite loop. |
CVE-2018-8036 | Medium | 6.5 | 2018-07-03 | In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exce… |
CVE-2018-12913 | High | 7.5 | 2018-06-27 | In Miniz 2.0.7, tinfl_decompress in miniz_tinfl.c has an infinite loop because sym2 and counter can both remain equal to zero. |
CVE-2018-12418 | Medium | 5.5 | 2018-06-14 | Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when h… |
CVE-2018-12228 | Medium | 6.5 | 2018-06-12 | An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a spec… |
CVE-2018-11657 | High | 7.5 | 2018-06-01 | ngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif. |
CVE-2018-11365 | High | 7.5 | 2018-05-22 | sas/readstat_sas7bcat_read.c in libreadstat.a in ReadStat 0.1.1 has an infinite loop. |
CVE-2017-18273 | Medium | 6.5 | 2018-05-18 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which allows attackers to… |
CVE-2017-18271 | Medium | 6.5 | 2018-05-18 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers… |
CVE-2018-10981 | Medium | 6.5 | 2018-05-10 | An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (host OS infinite loop) in situations where a QEMU d… |
CVE-2017-18267 | Medium | 5.5 | 2018-05-10 | The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service (infinite recursion) via… |
CVE-2018-10546 | High | 7.5 | 2018-04-29 | An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c be… |
CVE-2018-1339 | Medium | 5.5 | 2018-04-25 | A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18. |
CVE-2018-1338 | Medium | 5.5 | 2018-04-25 | A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18. |
CVE-2018-7751 | Medium | 6.5 | 2018-04-24 | The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML… |
CVE-2018-10289 | Medium | 5.5 | 2018-04-22 | In MuPDF 1.13.0, there is an infinite loop in the fz_skip_space function of the pdf/pdf-xref.c file. A remote adversary could leverage this vulnerability to ca… |
CVE-2017-18261 | Medium | 5.5 | 2018-04-19 | The arch_timer_reg_read_stable macro in arch/arm64/include/asm/arch_timer.h in the Linux kernel before 4.13 allows local users to cause a denial of service (in… |
CVE-2018-10177 | Medium | 6.5 | 2018-04-16 | In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability… |
CVE-2018-6918 | High | 7.5 | 2018-04-04 | In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count t… |
CVE-2018-9257 | High | 7.5 | 2018-04-04 | In Wireshark 2.4.0 to 2.4.5, the CQL dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-cql.c by checking for a nonzero num… |
CVE-2018-9251 | Medium | 5.3 | 2018-04-04 | The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted… |
CVE-2018-6253 | Medium | 5.5 | 2018-04-02 | NVIDIA GPU Display Driver contains a vulnerability in the DirectX and OpenGL Usermode drivers where a specially crafted pixel shader can cause infinite recursi… |
CVE-2018-9058 | Medium | 5.5 | 2018-03-27 | In Long Range Zip (aka lrzip) 0.631, there is an infinite loop in the runzip_fd function of runzip.c. Remote attackers could leverage this vulnerability to cau… |
CVE-2018-1324 | Medium | 5.5 | 2018-03-16 | A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveI… |
CVE-2017-18238 | Medium | 5.5 | 2018-03-15 | An issue was discovered in Exempi before 2.4.4. The TradQT_Manager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTime_Support.cpp allows rem… |
CVE-2017-18236 | Medium | 5.5 | 2018-03-15 | An issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSupport/ASF_Support.cpp allows remote attac… |
CVE-2017-18233 | Medium | 5.5 | 2018-03-15 | An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote attackers to cause… |
CVE-2018-1000075 | High | 7.5 | 2018-03-13 | RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier… |
CVE-2018-8002 | High | 8.8 | 2018-03-09 | In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow… |
CVE-2017-17150 | Medium | 5.5 | 2018-03-09 | Timergrp module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V5… |
CVE-2017-17131 | Medium | 5.7 | 2018-03-05 | Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00; VP9660 V… |
CVE-2017-18208 | Medium | 5.5 | 2018-03-01 | The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of service (infinite loop) by triggering u… |
CVE-2018-7453 | Medium | 5.5 | 2018-02-24 | Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop… |
CVE-2018-7421 | High | 7.5 | 2018-02-23 | In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dmp.c by correc… |
CVE-2018-7333 | High | 7.5 | 2018-02-23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite loop that was addressed by validating a chunk size. |
CVE-2018-7332 | High | 7.5 | 2018-02-23 | In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-reload.c had an infinite loop that was addressed by validating a length. |