CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

Parent: CWE-834 - Excessive Iteration

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

887 vulnerabilities with CWE-835
CVE-2021-1252 HIGH
ClamAV 0.103.0 and 0.103.1 - Denial of Service via Excel XLM Macro Parsing
CVSS 7.5
CVE-2021-22197 LOW
GitLab 10.6.0-13.8.6 - Authenticated Denial of Service via Merge Request Infinite Loop
CVSS 3.5
CVE-2021-28657 MEDIUM
Apache Tika <= 1.25 - Denial of Service via MP3 Parser Infinite Loop
CVSS 5.5
CVE-2021-20270 HIGH
Pygments 1.5-2.7.3 - Denial of Service via SMLLexer Infinite Loop
CVSS 7.5
CVE-2021-3416 MEDIUM
QEMU <= 5.2.0 - Denial of Service via Infinite Loop in NIC Emulator
CVSS 6.0
CVE-2021-28667 HIGH
StackStorm < 3.4.1 - Denial of Service via Unicode Logging in Non-UTF-8 Locale
CVSS 7.5
CVE-2021-25673 MEDIUM
SIMATIC S7-PLCSIM V5.4 - Denial of Service via Crafted File
CVSS 5.5
CVE-2021-27918 HIGH
Go <1.15.9, <1.16.1 - Infinite Loop
CVSS 7.5
CVE-2021-20255 MEDIUM
QEMU - Denial of Service via eepro100 i8255x Device Emulator Recursion
CVSS 5.5
CVE-2021-22161 MEDIUM
OpenWrt 19.07.0-19.07.6 - Denial of Service via IPv6 Routing Loop
CVSS 6.5
CVE-2021-0221 MEDIUM
Juniper Junos OS - Denial of Service via EVPN/VXLAN IP Multicast Traffic Loop
CVSS 6.5
CVE-2021-21235 MEDIUM
kamadak-exif <0.5.2 - Buffer Overflow
CVSS 5.7
CVE-2020-36023 MEDIUM
poppler 20.12.1 - Denial of Service via Crafted PDF in FoFiType1C::cvtGlyph
CVSS 6.5
CVE-2020-35141 HIGH
Faucet SDN Ryu 4.34 - Denial of Service via OFPQueueGetConfigReply Infinite Loop
CVSS 7.5
CVE-2020-35139 HIGH
Faucet SDN Ryu 4.34 - Denial of Service via OFPBundleCtrlMsg Infinite Loop
CVSS 7.5
CVE-2020-24221 MEDIUM
ngiflib 0.4 - Denial of Service via Crafted GIF File
CVSS 5.5
CVE-2020-14394 LOW
QEMU - Denial of Service via Infinite Loop in USB xHCI Controller Emulation
CVSS 3.2
CVE-2020-23566 MEDIUM
Irfanview 4.53 - Denial of Service via JPEG2000 PlugInSaveOptions Infinite Loop
CVSS 5.5
CVE-2020-18442 LOW
zziplib 0.13.69 - Denial of Service via Infinite Loop in unzzip_cat_file
CVSS 3.3
CVE-2020-13602 MEDIUM
Zephyr < 1.14.2 - Remote Denial of Service in LwM2M do_write_op_tlv
CVSS 4.0
CVE-2020-36310 MEDIUM
Linux Kernel < 5.8 - Denial of Service via Infinite Loop in KVM SVM
CVSS 5.5
CVE-2020-11186 MEDIUM
Qualcomm Modem Firmware - Denial of Service via Histogram Dimension Parsing
CVSS 5.5
CVE-2020-27618 MEDIUM
glibc < 2.32 - Denial of Service via Infinite Loop in iconv IBM Encodings
CVSS 5.5
CVE-2020-9307 MEDIUM
Hirschmann HiOS 07.0.04-07.1.00 - Unauthenticated Denial of Service via HSR Ring Port Infinite Loop
CVSS 6.5
CVE-2020-24944 HIGH
picoquic < 2020-07-03 - Denial of Service via Crafted QUIC Frame
CVSS 7.5
Details
Vulnerabilities 887