Vulnerabilities > Excessive Iteration

DATE CVE VULNERABILITY TITLE RISK
2017-07-18 CVE-2017-11409 Excessive Iteration vulnerability in multiple products
In Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop.
network
low complexity
wireshark debian CWE-834
7.5
2017-07-17 CVE-2017-11360 Excessive Iteration vulnerability in Imagemagick 7.0.61
The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge number_pixels value.
network
low complexity
imagemagick CWE-834
6.5
2017-07-12 CVE-2017-11188 Excessive Iteration vulnerability in Imagemagick 7.0.60
The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check.
network
low complexity
imagemagick CWE-834
7.5
2017-06-27 CVE-2017-9257 Excessive Iteration vulnerability in Audiocoding Freeware Advanced Audio Decoder 2 2.7
The mp4ff_read_ctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
local
low complexity
audiocoding CWE-834
5.5
2017-06-27 CVE-2017-9256 Excessive Iteration vulnerability in Audiocoding Freeware Advanced Audio Decoder 2 2.7
The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
local
low complexity
audiocoding CWE-834
5.5
2017-06-27 CVE-2017-9255 Excessive Iteration vulnerability in Audiocoding Freeware Advanced Audio Decoder 2 2.7
The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
local
low complexity
audiocoding CWE-834
5.5
2017-06-27 CVE-2017-9254 Excessive Iteration vulnerability in Audiocoding Freeware Advanced Audio Decoder 2 2.7
The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
local
low complexity
audiocoding CWE-834
5.5
2017-06-27 CVE-2017-9253 Excessive Iteration vulnerability in Audiocoding Freeware Advanced Audio Decoder 2 2.7
The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.
local
low complexity
audiocoding CWE-834
5.5
2017-04-24 CVE-2017-2330 Excessive Iteration vulnerability in Juniper Northstar Controller 2.1.0
A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, local user, to create a fork bomb scenario, also known as a rabbit virus, or wabbit, which will create processes that replicate themselves, until all resources are consumed on the system, leading to a denial of service to the entire system until it is restarted.
local
low complexity
juniper CWE-834
6.2
2016-12-10 CVE-2016-7421 Excessive Iteration vulnerability in multiple products
The pvscsi_ring_pop_req_descr function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit process IO loop to the ring size.
local
low complexity
qemu debian CWE-834
4.4