The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
107 vulnerabilities with CWE-834
CVE-2026-45680
MEDIUM
OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU
CVSS 5.9
CVE-2026-48156
LOW
pypdf: Possible long runtimes for zero-only width values in cross-reference streams
CVSS 3.3
CVE-2026-41313
MEDIUM
pypdf: Possible long runtimes for wrong size values in incremental mode
CVSS 6.5
CVE-2026-41168
MEDIUM
pypdf has possible long runtimes for wrong size values in cross-reference and object streams
CVSS 5.3
CVE-2026-40347
MEDIUM
Python-Multipart affected by Denial of Service via large multipart preamble or epilogue data
CVSS 5.3
CVE-2026-34043
MEDIUM
Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects
CVSS 5.9
CVE-2026-27025
MEDIUM
pypdf < 6.7.1 - Denial of Service via Malicious /ToUnicode Font Entry
CVSS 5.5
CVE-2025-67726
HIGH
Tornado < 6.5.3 - Denial of Service via HTTP Header Parameter Parsing
CVSS 7.5
CVE-2025-55181
MEDIUM
proxygen 2025.08.25.00-2025.12.01.00 - Denial of Service via HTTP Request/Response Body
CVSS 5.3
CVE-2025-62707
HIGH
pypdf < 6.1.3 - Denial of Service via DCTDecode Inline Image Parsing
CVSS 7.5
CVE-2025-56571
HIGH
finance.js 4.1.0 - Denial of Service via IRR Function Depth Parameter
CVSS 7.5
CVE-2025-6714
HIGH
MongoDB 6.0.0-6.0.22 - Denial of Service via Incomplete Data Handling in mongos
CVSS 7.5
CVE-2024-4227
HIGH
Genivia gSOAP 2.8.24-2.8.131 - Unauthenticated Denial of Service via Duplicate XML ID Attributes
CVSS 7.5
CVE-2024-8049
MEDIUM
Telerik Document Processing <2024.4.1106 - DoS
CVSS 6.5
CVE-2024-42237
MEDIUM
Linux Kernel < 5.16 - Denial of Service via Firmware Payload Length Validation
CVSS 5.5
CVE-2024-42071
MEDIUM
Linux Kernel - Excessive Iteration via NAPI Context Mismanagement
CVSS 5.5
CVE-2024-4603
MEDIUM
OpenSSL 3.0.0-3.0.13, 3.1.0-3.1.5, 3.2.0-3.2.1, 3.3.0 - Denial of Service via DSA Key Parameter Check
CVSS 5.3
CVE-2024-0842
HIGH
Backuply - Backup, Restore, Migrate and Clone <1.2.5 - DoS
CVSS 7.5
CVE-2024-25144
MEDIUM
Liferay Portal/DXP <7.4.3.26-7.2 - DoS
CVSS 4.1
CVE-2023-49316
HIGH
phpseclib 3.0.0-3.0.33 - Denial of Service via Excessive Iteration in Math/BinaryField.php
CVSS 7.5
CVE-2023-4043
MEDIUM
Eclipse Parsson <1.1.4-1.0.5 - Info Disclosure
CVSS 5.9
CVE-2023-5632
HIGH
Eclipse Mosquitto <= 2.0.5 - Denial of Service via EPOLLOUT Event Handling
CVSS 7.5
CVE-2023-33953
HIGH
gRPC < 1.53.2 - Denial of Service via HPACK Parser Memory and CPU Exhaustion
CVSS 7.5
CVE-2023-29407
MEDIUM
golang/image < 0.10.0 - Excessive Iteration via Malicious Tiled Image
CVSS 6.5
CVE-2023-3817
MEDIUM
OpenSSL 3.0.0-3.0.9 - Denial of Service via DH Parameter Check
CVSS 5.3
Details
Vulnerabilities
107