Vulnerabilities > Excessive Iteration

DATE CVE VULNERABILITY TITLE RISK
2023-07-31 CVE-2023-3817 Excessive Iteration vulnerability in Openssl
Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays.
network
low complexity
openssl CWE-834
5.3
2023-07-24 CVE-2023-38200 Excessive Iteration vulnerability in multiple products
A flaw was found in Keylime.
network
low complexity
keylime redhat fedoraproject CWE-834
7.5
2023-07-12 CVE-2023-30226 Excessive Iteration vulnerability in Rizin
An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0 verneed_entry allows attackers to cause a denial of service via crafted elf file.
local
low complexity
rizin CWE-834
5.5
2023-04-12 CVE-2023-1993 Excessive Iteration vulnerability in multiple products
LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
network
low complexity
wireshark debian fedoraproject CWE-834
6.5
2023-03-20 CVE-2023-26513 Excessive Iteration vulnerability in Apache Sling Resource Merger
Excessive Iteration vulnerability in Apache Software Foundation Apache Sling Resource Merger.This issue affects Apache Sling Resource Merger: from 1.2.0 before 1.4.2.
network
low complexity
apache CWE-834
7.5
2023-01-26 CVE-2023-0411 Excessive Iteration vulnerability in Wireshark
Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file
network
low complexity
wireshark CWE-834
6.5
2022-10-28 CVE-2022-3616 Excessive Iteration vulnerability in Cloudflare Octorpki
Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter.
network
low complexity
cloudflare CWE-834
7.5
2022-09-07 CVE-2022-36083 Excessive Iteration vulnerability in Jose Project Jose
JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js, Browser, Cloudflare Workers, Electron, and Deno.
network
low complexity
jose-project CWE-834
5.3
2022-02-24 CVE-2021-4021 Excessive Iteration vulnerability in Radare Radare2
A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2.
network
low complexity
radare CWE-834
7.5
2022-02-18 CVE-2022-0585 Excessive Iteration vulnerability in multiple products
Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted capture file
network
low complexity
wireshark fedoraproject debian CWE-834
6.5