Vulnerabilities > Loop with Unreachable Exit Condition ('Infinite Loop')

DATE CVE VULNERABILITY TITLE RISK
2021-04-07 CVE-2020-36310 Infinite Loop vulnerability in multiple products
An issue was discovered in the Linux kernel before 5.8.
local
low complexity
linux debian CWE-835
5.5
2021-04-02 CVE-2021-22197 Infinite Loop vulnerability in Gitlab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist when an authenticated user with specific rights access a MR having source and target branch pointing to each other
network
low complexity
gitlab CWE-835
4.3
2021-03-31 CVE-2021-28657 Infinite Loop vulnerability in multiple products
A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25.
local
low complexity
apache oracle CWE-835
5.5
2021-03-23 CVE-2021-20270 Infinite Loop vulnerability in multiple products
An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.
network
low complexity
pygments redhat fedoraproject debian CWE-835
7.5
2021-03-18 CVE-2021-3416 Infinite Loop vulnerability in multiple products
A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0.
local
low complexity
qemu fedoraproject redhat debian CWE-835
6.0
2021-03-18 CVE-2021-28667 Infinite Loop vulnerability in Stackstorm
StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space.
network
low complexity
stackstorm CWE-835
7.5
2021-03-17 CVE-2020-11186 Infinite Loop vulnerability in Qualcomm products
Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
local
low complexity
qualcomm CWE-835
5.5
2021-03-15 CVE-2021-25673 Infinite Loop vulnerability in Siemens Simatic S7-Plcsim
A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions).
local
low complexity
siemens CWE-835
5.5
2021-03-11 CVE-2021-27918 Infinite Loop vulnerability in Golang GO
encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element.
network
low complexity
golang CWE-835
7.5
2021-02-26 CVE-2020-27618 Infinite Loop vulnerability in multiple products
The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite loop in applications, resulting in a denial of service, a different vulnerability from CVE-2016-10228.
local
low complexity
gnu netapp oracle debian CWE-835
5.5