Vulnerabilities > Loop with Unreachable Exit Condition ('Infinite Loop')

DATE CVE VULNERABILITY TITLE RISK
2021-08-23 CVE-2021-39140 Infinite Loop vulnerability in multiple products
XStream is a simple library to serialize objects to XML and back again.
network
high complexity
xstream debian fedoraproject netapp oracle CWE-835
6.3
2021-08-19 CVE-2021-27565 Infinite Loop vulnerability in Hcc-Embedded Nichestack 3.0
The web server in InterNiche NicheStack through 4.0.1 allows remote attackers to cause a denial of service (infinite loop and networking outage) via an unexpected valid HTTP request such as OPTIONS.
network
low complexity
hcc-embedded CWE-835
7.5
2021-08-19 CVE-2021-31400 Infinite Loop vulnerability in Hcc-Embedded Nichestack 3.0
An issue was discovered in tcp_pulloutofband() in tcp_in.c in HCC embedded InterNiche 4.0.1.
network
low complexity
hcc-embedded CWE-835
7.5
2021-08-10 CVE-2021-38387 Infinite Loop vulnerability in Contiki-Os Contiki 3.0
In Contiki 3.0, a Telnet server that silently quits (before disconnection with clients) leads to connected clients entering an infinite loop and waiting forever, which may cause excessive CPU consumption.
network
low complexity
contiki-os CWE-835
7.5
2021-08-09 CVE-2021-38311 Infinite Loop vulnerability in Contiki-Os Contiki 3.0
In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service.
network
low complexity
contiki-os CWE-835
7.5
2021-08-05 CVE-2021-3679 Infinite Loop vulnerability in multiple products
A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way.
local
low complexity
linux redhat debian CWE-835
5.5
2021-07-20 CVE-2021-22235 Infinite Loop vulnerability in multiple products
Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file
network
low complexity
wireshark debian CWE-835
7.5
2021-07-13 CVE-2021-35515 Infinite Loop vulnerability in multiple products
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop.
network
low complexity
apache netapp oracle CWE-835
7.5
2021-07-02 CVE-2021-36125 Infinite Loop vulnerability in Mediawiki
An issue was discovered in the CentralAuth extension in MediaWiki through 1.36.
network
low complexity
mediawiki CWE-835
7.5
2021-06-18 CVE-2020-18442 Infinite Loop vulnerability in multiple products
Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".
3.3