CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
Parent: CWE-834 - Excessive Iteration
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
829 vulnerabilities with CWE-835
CVE-2017-18236
MEDIUM
exempi < 2.4.4 - Denial of Service via Crafted ASF File
CVSS 5.5
CVE-2017-18233
MEDIUM
exempi < 2.4.4 - Denial of Service via Integer Overflow in RIFF Chunk Class
CVSS 5.5
CVE-2017-17150
MEDIUM
Huawei DP300, RP200, TE30, TE40, TE50, TE60 Firmware - Denial of Service via Timergrp Module Infinite Loop
CVSS 5.5
CVE-2017-17131
MEDIUM
Huawei DP300, RP200, TE30, TE50, TE60, VP9660 Firmware - Denial of Service via Malformed PuTTY Key File
CVSS 5.7
CVE-2017-18208
MEDIUM
Linux Kernel < 4.14.4 - Denial of Service via MADVISE_WILLNEED Infinite Loop
CVSS 5.5
CVE-2017-18186
MEDIUM
qpdf < 7.0.0 - Denial of Service via Infinite Loop in QPDF.cc
CVSS 5.5
CVE-2017-18183
MEDIUM
qpdf < 7.0.0 - Denial of Service via Infinite Loop in QPDFWriter::enqueueObject()
CVSS 5.5
CVE-2017-12412
HIGH
ccn-lite < 2.0.0 - Denial of Service via Crafted File
CVSS 7.8
CVE-2017-12626
HIGH
Apache POI < 3.17 - Denial of Service via Crafted WMF EMF MSG Macro DOC PPT XLS Parsing
CVSS 7.5
CVE-2017-13195
HIGH
Android 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 - Denial of Service via Infinite Loop in ihevcd_parse_sps
CVSS 7.5
CVE-2017-13193
HIGH
Android 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 - Denial of Service via Infinite Loop in ihevcd_decode.c
CVSS 7.5
CVE-2017-13192
HIGH
Android 5.1.1-8.1 DoS via Infinite Loop in ihevcd_parse_slice_header
CVSS 7.5
CVE-2017-13191
HIGH
Android 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 - Denial of Service via Infinite Loop in ihevcd_decode
CVSS 7.5
CVE-2017-17681
MEDIUM
ImageMagick 7.0.7-12 Q16 - Denial of Service via PSD Channel Zip Infinite Loop
CVSS 6.5
CVE-2017-17044
MEDIUM
Xen < 4.9.1 - Denial of Service via Populate on Demand Error Mishandling
CVSS 6.5
CVE-2017-16944
HIGH
Exim 4.88-4.89 - Denial of Service via BDAT Command Handling
CVSS 7.5
CVE-2017-16932
HIGH
libxml2 < 2.9.5 - Denial of Service via Infinite Recursion in Parameter Entities
CVSS 7.5
CVE-2017-2909
HIGH
Cesanta Mongoose 6.8 - Denial of Service via DNS Request Infinite Loop
CVSS 7.5
CVE-2017-15908
HIGH
systemd 223-235 - Denial of Service via DNS NSEC Resource Record
CVSS 7.5
CVE-2017-15871
HIGH
serialize-to-js < 1.1.1 - Denial of Service via Immediately Invoked Function Expression
CVSS 7.5
CVE-2017-15223
MEDIUM
ArGoSoft Mini Mail Server < 1.0.0.2 - Denial of Service via Infinite Loop
CVSS 5.3
CVE-2017-15602
HIGH
GNU Libextractor 1.4 - Infinite Loop via Crafted Chunk Size in NSFE Extractor
CVSS 7.5
CVE-2017-15024
MEDIUM
GNU Binutils - Denial of Service via Crafted ELF File
CVSS 5.5
CVE-2017-14934
MEDIUM
GNU Binutils 2.29 - Denial of Service via Crafted ELF File with Negative CU Size
CVSS 5.5
CVE-2017-14933
MEDIUM
GNU Binutils 2.29 - Denial of Service via Crafted ELF File
CVSS 5.5
Details
Vulnerabilities
829