The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
474 vulnerabilities with CWE-674
CVE-2019-12213
MEDIUM
FreeImage 3.18.0 - Denial of Service via TIFFReadDirectory Stack Exhaustion
CVSS 6.5
CVE-2019-12212
HIGH
FreeImage 3.18.0 - Denial of Service via JXR File Recursion in StreamCalcIFDSize
CVSS 7.5
CVE-2019-11413
HIGH
Artifex MuJS 1.0.5 - Buffer Overflow
CVSS 7.5
CVE-2019-11026
MEDIUM
Poppler 0.75.0 - Denial of Service via Infinite Recursion in FontInfoScanner
CVSS 6.5
CVE-2019-11024
MEDIUM
libsixel 1.8.2 - Uncontrolled Recursion in load_pnm Function
CVSS 5.5
CVE-2019-9904
MEDIUM
graphviz 2.40.1 - Stack Overflow via Recursive agclose Calls
CVSS 6.5
CVE-2019-9545
HIGH
Poppler 0.74.0 - Denial of Service via Recursive Function Call in JBIG2Stream::readTextRegion
CVSS 8.8
CVE-2019-9543
HIGH
Poppler 0.74.0 - Denial of Service via Recursive Function Call in JBIG2Stream
CVSS 8.8
CVE-2019-9192
HIGH
GNU C Library <2.29 - Uncontrolled Recursion
CVSS 7.5
CVE-2019-9144
HIGH
Exiv2 0.27 - Denial of Service via Infinite Recursion in BigTiffImage::printIFD
CVSS 8.8
CVE-2019-9143
HIGH
Exiv2 0.27 - Denial of Service via Infinite Recursion in Image::printTiffStructure
CVSS 8.8
CVE-2019-9071
MEDIUM
GNU Binutils - Denial of Service via Recursive Template Scope Counting
CVSS 5.5
CVE-2019-1003011
HIGH
Jenkins Token Macro Plugin <2.5 - Info Disclosure & DoS
CVSS 8.1
CVE-2019-0001
HIGH
Juniper Junos OS - Denial of Service via Malformed Packet in BBE-SMGD
CVSS 7.5
CVE-2019-6293
MEDIUM
flex 2.6.4 - Denial of Service via Recursive mark_beginning_as_normal Calls
CVSS 5.5
CVE-2019-6292
MEDIUM
yaml-cpp 0.6.2 - Denial of Service via Recursive Stack Exhaustion in SingleDocParser
CVSS 6.5
CVE-2019-6291
MEDIUM
Netwide Assembler < 2.14.02 - Denial of Service via Recursive Expression Parsing
CVSS 5.5
CVE-2019-6290
MEDIUM
Netwide Assembler (NASM) <2.14.02 - DoS
CVSS 5.5
CVE-2019-6285
MEDIUM
yaml-cpp 0.6.2 - Denial of Service via Crafted YAML File
CVSS 6.5
CVE-2019-6131
MEDIUM
Artifex MuPDF <1.14.0 - Memory Corruption
CVSS 5.5
CVE-2018-25282
MEDIUM
Nmap 7.70 Denial of Service via XML Entity Expansion
CVSS 6.2
CVE-2018-21232
MEDIUM
re2c < 2.0 - Uncontrolled Recursion in find_fixed_tags
CVSS 5.5
CVE-2018-4002
HIGH
CUJO Smart Firewall Firmware 7003 - Unauthenticated Denial of Service via mDNS Label Compression Pointer Handling
CVSS 7.5
CVE-2018-16452
HIGH
tcpdump < 4.9.3 - Stack Exhaustion via SMB Parser Recursion
CVSS 7.5
CVE-2018-16300
HIGH
tcpdump < 4.9.3 - Denial of Service via BGP Parser Uncontrolled Recursion
CVSS 7.5
Details
Vulnerabilities
474