Vulnerabilities > Loop with Unreachable Exit Condition ('Infinite Loop')

DATE CVE VULNERABILITY TITLE RISK
2021-02-11 CVE-2020-9307 Infinite Loop vulnerability in Belden Hirschmann Hios 07.0.04/08.0.00
Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service.
low complexity
belden CWE-835
6.5
2021-02-08 CVE-2020-24944 Infinite Loop vulnerability in Privateoctopus Picoquic
picoquic (before 3rd of July 2020) allows attackers to cause a denial of service (infinite loop) via a crafted QUIC frame, related to the picoquic_decode_frames and picoquic_decode_stream_frame functions and epoch==3.
network
low complexity
privateoctopus CWE-835
7.5
2021-02-07 CVE-2021-22161 Infinite Loop vulnerability in Openwrt
In OpenWrt 19.07.x before 19.07.7, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router.
low complexity
openwrt CWE-835
6.5
2021-01-26 CVE-2020-36227 Infinite Loop vulnerability in multiple products
A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.
network
low complexity
openldap debian apple CWE-835
7.5
2021-01-15 CVE-2021-0221 Infinite Loop vulnerability in Juniper Junos
In an EVPN/VXLAN scenario, if an IRB interface with a virtual gateway address (VGA) is configured on a PE, a traffic loop may occur upon receipt of specific IP multicast traffic.
low complexity
juniper CWE-835
6.5
2021-01-06 CVE-2021-21235 Infinite Loop vulnerability in Kamadak-Exif Project Kamadak-Exif 0.5.2
kamadak-exif is an exif parsing library written in pure Rust.
network
low complexity
kamadak-exif-project CWE-835
6.5
2020-12-30 CVE-2020-28095 Infinite Loop vulnerability in Tenda Ac1200 Firmware 15.03.06.51Multi
On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop.
network
low complexity
tenda CWE-835
7.5
2020-12-26 CVE-2020-29385 Infinite Loop vulnerability in multiple products
GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the function write_indexes.
local
low complexity
gnome canonical fedoraproject CWE-835
5.5
2020-12-22 CVE-2020-35609 Infinite Loop vulnerability in Microsoft Azure Sphere 20.05
A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05.
local
low complexity
microsoft CWE-835
5.5
2020-12-11 CVE-2020-24337 Infinite Loop vulnerability in Altran Picotcp and Picotcp-Ng
An issue was discovered in picoTCP and picoTCP-NG through 1.7.0.
network
low complexity
altran CWE-835
7.5