The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
430 vulnerabilities with CWE-674
CVE-2016-10707
HIGH
jQuery 3.0.0-rc.1 - Denial of Service via Mixed-Case Boolean Attribute Recursion
CVSS 7.5
CVE-2016-4425
MEDIUM
jansson < 2.7 - Denial of Service via Deep Recursion in JSON Parser
CVSS 6.5
CVE-2016-3627
HIGH
libxml2 <2.9.3 - DoS
CVSS 7.5
CVE-2007-3409
HIGH
Net::DNS < 0.60 - Denial of Service via Malformed Compressed DNS Packet
CVSS 7.5
CVE-2007-1285
HIGH
PHP 4.x < 4.4.7 and 5.x < 5.2.2 - Denial of Service via Deeply Nested Arrays
CVSS 7.5
Details
Vulnerabilities
430