CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
Parent: CWE-834 - Excessive Iteration
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
887 vulnerabilities with CWE-835
CVE-2020-36227
HIGH
OpenLDAP < 2.4.57 - Denial of Service via Cancel Operation Infinite Loop
CVSS 7.5
CVE-2020-28095
HIGH
Tenda AC6 Firmware 15.03.06.51_multi - Denial of Service via Change Password API
CVSS 7.5
CVE-2020-29385
MEDIUM
GNOME gdk-pixbuf < 2.42.2 - Denial of Service via Infinite Loop in LZW Decompression
CVSS 5.5
CVE-2020-35609
MEDIUM
Microsoft Azure Sphere 20.05 - Denial of Service via Asynchronous ioctl Calls
CVSS 5.5
CVE-2020-24337
HIGH
picoTCP and picoTCP-NG < 1.7.0 - Denial of Service via TCP Option Parsing Infinite Loop
CVSS 7.5
CVE-2020-17444
HIGH
picoTCP < 1.7.0 - Denial of Service via IPv6 Extension Header Length Overflow
CVSS 7.5
CVE-2020-13986
HIGH
Contiki < 3.0 - Denial of Service via RPL Extension Header Infinite Loop
CVSS 7.5
CVE-2020-13984
HIGH
Contiki < 3.0 - Denial of Service via IPv6 Extension Header Processing
CVSS 7.5
CVE-2020-28916
MEDIUM
QEMU 5.0.0 - Denial of Service via Infinite Loop in e1000e RX Descriptor Handling
CVSS 5.5
CVE-2020-16127
LOW
accountsservice < 0.6.55 - Denial of Service via ~/.pam_environment Symlink
CVSS 2.8
CVE-2020-27152
MEDIUM
Linux kernel <5.9.2 - Infinite Loop
CVSS 5.5
CVE-2020-28030
HIGH
Wireshark 3.2.0-3.2.7 - Denial of Service in GQUIC Dissector
CVSS 7.5
CVE-2020-26575
HIGH
Wireshark < 3.2.7 - Denial of Service via Infinite Loop in FBZERO Dissector
CVSS 7.5
CVE-2020-25641
MEDIUM
Linux Kernel < 5.9-rc7 - Denial of Service via Zero-Length Biovec Request
CVSS 5.5
CVE-2020-15598
HIGH
OWASP ModSecurity 3.0.0-3.0.4 - Denial of Service via Regular Expression Handling
CVSS 7.5
CVE-2020-25625
MEDIUM
QEMU 5.0.0 - Infinite Loop via TD List in hw/usb/hcd-ohci.c
CVSS 5.3
CVE-2020-25574
HIGH
hyper/http < 0.1.20 - Denial of Service via Integer Overflow in HeaderMap::reserve()
CVSS 7.5
CVE-2020-12457
HIGH
wolfssl < 4.5.0 - Denial of Service via TLS 1.3 ChangeCipherSpec Message Processing
CVSS 7.5
CVE-2020-0247
MEDIUM
Android - Denial of Service via Uncaught Exception in Threshold::getHistogram
CVSS 5.5
CVE-2020-15654
MEDIUM
Firefox < 79.0 and Firefox ESR < 78.1 - Denial of Service via Infinite Loop with Custom CSS Cursor
CVSS 6.5
CVE-2020-16845
HIGH
GO < 1.13.15 - Infinite Loop
CVSS 7.5
CVE-2020-5761
HIGH
Grandstream HT800 Series Firmware < 1.0.17.5 - Unauthenticated Denial of Service via TR-069 Service
CVSS 7.5
CVE-2020-13935
HIGH
Apache Tomcat 7.0.27-7.0.104, 8.5.0-8.5.56, 9.0.0.M1-9.0.36, 10.0.0-M1-M6 DoS via WebSocket Frame Payload Length
CVSS 7.5
CVE-2020-15466
HIGH
Wireshark 3.2.0-3.2.4 - Denial of Service via GVCP Dissector Infinite Loop
CVSS 7.5
CVE-2020-14448
HIGH
Mattermost Server < 5.23.0 - Denial of Service via Automatic Direct Message Replies
CVSS 7.5
Details
Vulnerabilities
887