CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
Parent: CWE-834 - Excessive Iteration
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
887 vulnerabilities with CWE-835
CVE-2021-3908
MEDIUM
cloudflare/octorpki < 1.3.0 - Uncontrolled Resource Consumption via Certificate Chain Depth
CVSS 5.9
CVE-2021-43172
HIGH
NLnet Labs Routinator <0.10.2 - DoS
CVSS 7.5
CVE-2021-41973
MEDIUM
Apache MINA < 2.0.22 - Denial of Service via Malformed HTTP Request
CVSS 6.5
CVE-2021-42715
MEDIUM
stb_image.h 1.33-2.27 - Denial of Service via Truncated HDR RLE Scanlines
CVSS 5.5
CVE-2021-31363
MEDIUM
Juniper Junos OS and Junos OS Evolved - Denial of Service via LDP FEC Handling
CVSS 6.5
CVE-2021-42260
HIGH
TinyXML < 2.6.2 - Denial of Service via Infinite Loop in TiXmlParsingData::Stamp
CVSS 7.5
CVE-2021-42084
MEDIUM
Zammad < 4.1.1 - Authenticated Denial of Service via Crafted Request Loop
CVSS 6.5
CVE-2021-42040
HIGH
MediaWiki < 1.36.2 - Denial of Service via Loops Extension Infinite Loop
CVSS 7.5
CVE-2021-29365
MEDIUM
Irfanview 4.57 - Denial of Service via Crafted BMP File in EFFECTS!AutoCrop_W
CVSS 5.5
CVE-2021-37146
HIGH
ros-comm < 1.4.11 - Denial of Service via Crafted XMLRPC Call
CVSS 7.5
CVE-2021-41079
HIGH
Apache Tomcat 8.5.0-8.5.63 9.0.0-M1-9.0.43 10.0.0-M1-10.0.2 - Denial of Service via TLS Packet Validation Bypass
CVSS 7.5
CVE-2021-40839
HIGH
rencode < 1.0.6 - Denial of Service via Malformed Typecode Decoding
CVSS 7.5
CVE-2021-1914
HIGH
Qualcomm APQ8009 Firmware - Denial of Service via Infinite Loop
CVSS 7.5
CVE-2021-39194
MEDIUM
kaml < 0.35.3 - Denial of Service via Polymorphic YAML Tag Parsing
CVSS 4.3
CVE-2021-33599
MEDIUM
F-Secure Atlant - Denial of Service via WIM Archive Scanning
CVSS 4.6
CVE-2021-28698
MEDIUM
Xen >= 3.2.0 - Denial of Service via Grant Table Handling Infinite Loop
CVSS 5.5
CVE-2021-39140
MEDIUM
XStream < 1.4.18 - Denial of Service via CPU Exhaustion
CVSS 6.5
CVE-2021-27565
HIGH
NicheStack < 4.0.1 - Denial of Service via HTTP Request Handler Infinite Loop
CVSS 7.5
CVE-2021-31400
HIGH
HCC Embedded InterNiche < 4.3 - Denial of Service via TCP Out-of-Band Urgent Data Processing
CVSS 7.5
CVE-2021-37714
HIGH
jsoup < 1.14.2 - Denial of Service via Malicious HTML/XML Input
CVSS 7.5
CVE-2021-37686
MEDIUM
TensorFlow 2.6.0rc0-2.6.0rc2 - Infinite Loop via Strided Slice Ellipsis Handling
CVSS 5.5
CVE-2021-38387
HIGH
Contiki 3.0 - Denial of Service via Telnet Server Disconnection
CVSS 7.5
CVE-2021-38311
HIGH
Contiki 3.0 - Denial of Service via Telnet Option Negotiation Loop
CVSS 7.5
CVE-2021-37622
MEDIUM
exiv2 < 0.27.4 - Denial of Service via IPTC Data Deletion
CVSS 5.5
CVE-2021-37621
MEDIUM
exiv2 < 0.27.4 - Denial of Service via Crafted Image ICC Profile
CVSS 5.5
Details
Vulnerabilities
887