Vulnerabilities > Loop with Unreachable Exit Condition ('Infinite Loop')

DATE CVE VULNERABILITY TITLE RISK
2020-01-31 CVE-2015-6815 Infinite Loop vulnerability in multiple products
The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of service (infinite loop and guest crash) via unspecified vectors.
3.5
2020-01-27 CVE-2019-20421 Infinite Loop vulnerability in multiple products
In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption.
network
low complexity
exiv2 canonical debian CWE-835
7.5
2020-01-23 CVE-2015-5278 Infinite Loop vulnerability in multiple products
The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets.
network
low complexity
qemu fedoraproject canonical arista CWE-835
6.5
2020-01-23 CVE-2015-5239 Infinite Loop vulnerability in multiple products
Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.
network
low complexity
qemu fedoraproject canonical suse arista CWE-835
6.5
2020-01-21 CVE-2020-7595 Infinite Loop vulnerability in multiple products
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
7.5
2020-01-15 CVE-2020-1600 Infinite Loop vulnerability in Juniper Junos
In a Point-to-Multipoint (P2MP) Label Switched Path (LSP) scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon (RPD) in Juniper Networks Junos OS allows a specific SNMP request to trigger an infinite loop causing a high CPU usage Denial of Service (DoS) condition.
network
low complexity
juniper CWE-835
6.5
2019-12-31 CVE-2019-20201 Infinite Loop vulnerability in Ezxml Project Ezxml
An issue was discovered in ezXML 0.8.3 through 0.8.6.
network
low complexity
ezxml-project CWE-835
6.5
2019-12-26 CVE-2019-5274 Infinite Loop vulnerability in Huawei Usg9500 Firmware V500R001C30/V500R001C60
USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability.
network
low complexity
huawei CWE-835
7.5
2019-12-26 CVE-2011-1474 Infinite Loop vulnerability in Linux Kernel 2.6.32.33/2.6.37.4/2.6.38
A locally locally exploitable DOS vulnerability was found in pax-linux versions 2.6.32.33-test79.patch, 2.6.38-test3.patch, and 2.6.37.4-test14.patch.
local
low complexity
linux CWE-835
5.5
2019-12-15 CVE-2014-8561 Infinite Loop vulnerability in multiple products
imagemagick 6.8.9.6 has remote DOS via infinite loop
network
low complexity
imagemagick debian CWE-835
6.5