Vulnerabilities > Loop with Unreachable Exit Condition ('Infinite Loop')

DATE CVE VULNERABILITY TITLE RISK
2019-01-02 CVE-2019-3573 Infinite Loop vulnerability in Libsixel Project Libsixel 1.8.2
In libsixel v1.8.2, there is an infinite loop in the function sixel_decode_raw_impl() in the file fromsixel.c, as demonstrated by sixel2png.
local
low complexity
libsixel-project CWE-835
5.5
2018-12-28 CVE-2018-20578 Infinite Loop vulnerability in Nuttx
An issue was discovered in NuttX before 7.27.
network
low complexity
nuttx CWE-835
7.5
2018-12-26 CVE-2018-20482 Infinite Loop vulnerability in multiple products
GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different user's process (e.g., a system backup running as root).
local
high complexity
gnu debian opensuse CWE-835
4.7
2018-12-26 CVE-2018-20467 Infinite Loop vulnerability in multiple products
In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption.
network
low complexity
imagemagick opensuse debian canonical CWE-835
6.5
2018-12-24 CVE-2018-17197 Infinite Loop vulnerability in Apache Tika
A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.
network
low complexity
apache CWE-835
6.5
2018-12-22 CVE-2018-20348 Infinite Loop vulnerability in Libpff Project Libpff 20161119/20180428
libpff_item_tree_create_node in libpff_item_tree.c in libpff before experimental-20180714 allows attackers to cause a denial of service (infinite recursion) via a crafted file, related to libfdata_tree_get_node_value in libfdata_tree.c.
local
low complexity
libpff-project CWE-835
5.5
2018-12-20 CVE-2018-20216 Infinite Loop vulnerability in multiple products
QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishandled).
network
low complexity
qemu canonical CWE-835
7.5
2018-12-19 CVE-2018-20021 Infinite Loop vulnerability in multiple products
LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code.
network
low complexity
libvnc-project debian canonical CWE-835
7.5
2018-12-12 CVE-2018-20103 Infinite Loop vulnerability in multiple products
An issue was discovered in dns.c in HAProxy through 1.8.14.
network
low complexity
haproxy canonical redhat CWE-835
7.5
2018-12-12 CVE-2018-20099 Infinite Loop vulnerability in Exiv2 0.27
There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3.
network
low complexity
exiv2 CWE-835
6.5