CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

Parent: CWE-834 - Excessive Iteration

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

887 vulnerabilities with CWE-835
CVE-2022-34862 HIGH
BIG-IP 13.1.0-13.1.4, 14.1.0-14.1.4, 15.1.0-15.1.6, 16.1.0-16.1.3 DoS via LTM Virtual Server
CVSS 7.5
CVE-2022-36313 MEDIUM
File-type <16.5.4, 17.x <17.1.3 - DoS
CVSS 5.5
CVE-2022-30634 HIGH
GO < 1.17.11 - Infinite Loop
CVSS 7.5
CVE-2022-34760 HIGH
OPC UA Modicon <1.10 & X80 RTU 1.0 DoS via Cookie Handling
CVSS 7.5
CVE-2022-32058 HIGH
TP-Link TL-WR741N/TL-WR742N V1/V2/V3_130415 - Denial of Service via Infinite Loop in httpRpmPass
CVSS 7.5
CVE-2022-29862 HIGH
OPC UA .NET Standard Stack < 1.4.368.58 - Denial of Service via Crafted Message
CVSS 7.5
CVE-2022-25851 HIGH
jpeg-js < 0.4.4 - Denial of Service via Infinite Loop
CVSS 7.5
CVE-2022-27781 HIGH
curl < 7.83.1 - Denial of Service via Malicious Server Certificate Chain
CVSS 7.5
CVE-2022-29190 HIGH
Pion DTLS < 2.1.4 - Denial of Service via Infinite Loop
CVSS 7.5
CVE-2022-29028 MEDIUM
JT2Go, Teamcenter Visualization <13.3.0.3, 14.0.0.1 - DoS
CVSS 5.5
CVE-2022-24792 HIGH
PJSIP < 2.12 - Denial of Service via Invalid WAV File Data Chunk
CVSS 7.5
CVE-2022-24859 MEDIUM
PyPDF2 < 1.27.5 - Denial of Service via Infinite Loop in Content Stream Parsing
CVSS 6.2
CVE-2022-21159 HIGH
libiec61850 1.5.0 - Denial of Service via Malformed IEC61850 Messages
CVSS 7.5
CVE-2022-24191 MEDIUM
htmldoc 1.9.14 - Infinite Loop and Buffer Overflow via GIF LZW Decompression
CVSS 5.5
CVE-2022-1222 MEDIUM
gpac < 2.0 - Denial of Service via Infinite Loop
CVSS 5.5
CVE-2022-24763 HIGH
PJSIP < 2.13 - Denial of Service via XML Parser Infinite Loop
CVSS 7.5
CVE-2022-23352 HIGH
BigAnt Server 5.6.06 - Denial of Service via Infinite Loop
CVSS 7.5
CVE-2022-0778 HIGH
OpenSSL 1.0.2-1.0.2zc, 1.1.1-1.1.1m, 3.0.0-3.0.1 - Denial of Service via BN_mod_sqrt Infinite Loop
CVSS 7.5
CVE-2022-0711 HIGH
HAProxy 2.2.0-2.2.20 - Denial of Service via Set-Cookie2 Header Processing
CVSS 7.5
CVE-2022-23641 MEDIUM
Discourse < 2.8.1 - Denial of Service via Streaming URL Onebox Parsing
CVSS 6.5
CVE-2022-0586 MEDIUM
Wireshark 3.4.0-3.4.11 and 3.6.0-3.6.1 - Denial of Service via RTMPT Protocol Dissector Infinite Loop
CVSS 6.3
CVE-2022-23833 HIGH
Django 2.2-2.2.26, 3.2-3.2.11, 4.0-4.0.1 - Denial of Service via MultiPartParser Infinite Loop
CVSS 7.5
CVE-2022-23596 HIGH
junrar < 7.4.1 - Infinite Loop via Crafted RAR Archive
CVSS 7.5
CVE-2022-23098 HIGH
Intel ConnMan < 1.40 - Denial of Service via DNS Proxy TCP Server
CVSS 7.5
CVE-2022-23968 HIGH
Xerox VersaLink Firmware < 42.01 - Unauthenticated Denial of Service via Crafted TIFF File
CVSS 7.5
Details
Vulnerabilities 887