Vulnerabilities > Loop with Unreachable Exit Condition ('Infinite Loop')

DATE CVE VULNERABILITY TITLE RISK
2020-12-11 CVE-2020-17444 Infinite Loop vulnerability in Altran Picotcp
An issue was discovered in picoTCP 1.7.0.
network
low complexity
altran CWE-835
7.5
2020-12-11 CVE-2020-13986 Infinite Loop vulnerability in Contiki-Os Contiki
An issue was discovered in Contiki through 3.0.
network
low complexity
contiki-os CWE-835
7.5
2020-12-11 CVE-2020-13984 Infinite Loop vulnerability in Contiki-Os Contiki
An issue was discovered in Contiki through 3.0.
network
low complexity
contiki-os CWE-835
7.5
2020-12-04 CVE-2020-28916 Infinite Loop vulnerability in multiple products
hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address.
local
low complexity
qemu debian CWE-835
5.5
2020-11-23 CVE-2018-20803 Infinite Loop vulnerability in Mongodb
A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks.
network
low complexity
mongodb CWE-835
6.5
2020-11-11 CVE-2020-16127 Infinite Loop vulnerability in Freedesktop Accountsservice
An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, would perform unbounded read operations on user-controlled ~/.pam_environment files, allowing an infinite loop if /dev/zero is symlinked to this location.
local
low complexity
freedesktop CWE-835
5.5
2020-11-06 CVE-2020-27152 Infinite Loop vulnerability in Linux Kernel
An issue was discovered in ioapic_lazy_update_eoi in arch/x86/kvm/ioapic.c in the Linux kernel before 5.9.2.
local
low complexity
linux CWE-835
5.5
2020-11-02 CVE-2020-28030 Infinite Loop vulnerability in multiple products
In Wireshark 3.2.0 to 3.2.7, the GQUIC dissector could crash.
network
low complexity
wireshark debian fedoraproject CWE-835
7.5
2020-10-16 CVE-2019-18796 Infinite Loop vulnerability in Un4Seen Bass 2.4.14.1
The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service vulnerability (infinite loop) via a crafted .mp3 file.
network
low complexity
un4seen CWE-835
6.5
2020-10-06 CVE-2020-26575 Infinite Loop vulnerability in multiple products
In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop.
network
low complexity
wireshark fedoraproject debian oracle CWE-835
7.5