Vulnerabilities > Loop with Unreachable Exit Condition ('Infinite Loop')

DATE CVE VULNERABILITY TITLE RISK
2018-09-19 CVE-2018-8017 Infinite Loop vulnerability in Apache Tika
In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser.
local
low complexity
apache CWE-835
5.5
2018-09-14 CVE-2018-17042 Infinite Loop vulnerability in Scalabium Dbf2Txt 20120719
An issue has been found in dbf2txt through 2012-07-19.
local
low complexity
scalabium CWE-835
5.5
2018-09-06 CVE-2018-16646 Infinite Loop vulnerability in multiple products
In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file.
network
low complexity
freedesktop debian canonical CWE-835
6.5
2018-08-30 CVE-2018-14621 Infinite Loop vulnerability in Libtirpc Project Libtirpc
An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2.
network
low complexity
libtirpc-project CWE-835
7.5
2018-08-27 CVE-2018-10938 Infinite Loop vulnerability in multiple products
A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4.
network
high complexity
linux canonical debian CWE-835
5.9
2018-08-25 CVE-2018-15856 Infinite Loop vulnerability in multiple products
An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files.
local
low complexity
xkbcommon canonical CWE-835
5.5
2018-08-23 CVE-2018-1999044 Infinite Loop vulnerability in Jenkins
A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop.
network
low complexity
jenkins CWE-835
6.5
2018-08-16 CVE-2018-14567 Infinite Loop vulnerability in multiple products
libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035 and CVE-2018-9251.
network
low complexity
xmlsoft debian canonical CWE-835
6.5
2018-08-16 CVE-2018-11771 Infinite Loop vulnerability in multiple products
When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached.
local
low complexity
apache oracle CWE-835
5.5
2018-08-02 CVE-2018-1336 Infinite Loop vulnerability in multiple products
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service.
network
low complexity
apache redhat debian canonical CWE-835
7.5