Vulnerabilities > Excessive Iteration

DATE CVE VULNERABILITY TITLE RISK
2018-07-19 CVE-2018-14342 Excessive Iteration vulnerability in multiple products
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop.
network
low complexity
wireshark debian CWE-834
7.5
2018-06-06 CVE-2018-11813 Excessive Iteration vulnerability in IJG Libjpeg 9C
libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.
network
low complexity
ijg CWE-834
7.5
2018-05-28 CVE-2018-11507 Excessive Iteration vulnerability in Flif 0.3
An issue was discovered in Free Lossless Image Format (FLIF) 0.3.
network
low complexity
flif CWE-834
6.5
2018-04-04 CVE-2017-13279 Excessive Iteration vulnerability in Google Android
In M3UParser::parse of M3UParser.cpp, there is a memory resource exhaustion due to a large loop of pushing items into a vector.
local
low complexity
google CWE-834
5.5
2018-04-04 CVE-2018-9261 Excessive Iteration vulnerability in multiple products
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overflow.
network
low complexity
wireshark debian CWE-834
7.5
2018-03-30 CVE-2018-9133 Excessive Iteration vulnerability in multiple products
ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file.
network
low complexity
imagemagick canonical CWE-834
6.5
2018-02-23 CVE-2018-7323 Excessive Iteration vulnerability in multiple products
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by ensuring that a calculated length was monotonically increasing.
network
low complexity
wireshark debian CWE-834
7.5
2018-02-23 CVE-2018-7321 Excessive Iteration vulnerability in Wireshark
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was addressed by not proceeding with dissection after encountering an unexpected type.
network
low complexity
wireshark CWE-834
7.5
2018-01-05 CVE-2018-5252 Excessive Iteration vulnerability in Entropymine Imageworsener 1.3.2
libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the get_raw_sample_int function in imagew-main.c.
network
high complexity
entropymine CWE-834
5.3
2017-12-27 CVE-2017-17914 Excessive Iteration vulnerability in multiple products
In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (ReadOneMNGImage large loop) via a crafted mng image file.
network
low complexity
imagemagick debian canonical CWE-834
6.5