Vulnerabilities > Uncontrolled Recursion

DATE CVE VULNERABILITY TITLE RISK
2020-11-02 CVE-2020-9861 Uncontrolled Recursion vulnerability in Apple Swift
A stack overflow issue existed in Swift for Linux.
network
low complexity
apple CWE-674
7.5
2020-09-09 CVE-2020-25219 Uncontrolled Recursion vulnerability in multiple products
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character.
7.5
2020-08-12 CVE-2020-12100 Uncontrolled Recursion vulnerability in multiple products
In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service (resource consumption) via a crafted e-mail message with deeply nested MIME parts.
network
low complexity
dovecot debian fedoraproject canonical CWE-674
7.5
2020-08-10 CVE-2020-9243 Uncontrolled Recursion vulnerability in Huawei Mate 30 Firmware
HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a denial of service vulnerability.
local
low complexity
huawei CWE-674
5.5
2020-07-28 CVE-2020-16094 Uncontrolled Recursion vulnerability in multiple products
In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree.
network
low complexity
claws-mail fedoraproject CWE-674
7.5
2020-07-14 CVE-2020-15101 Uncontrolled Recursion vulnerability in Schokokeks Freewvs
In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk().
local
low complexity
schokokeks CWE-674
3.3
2020-06-05 CVE-2020-5591 Uncontrolled Recursion vulnerability in Xack DNS
XACK DNS 1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions before 1.7.0 allow remote attackers to cause a denial of service condition resulting in degradation of the recursive resolver's performance or compromising the recursive resolver as a reflector in a reflection attack.
network
low complexity
xack CWE-674
7.5
2020-06-04 CVE-2020-13800 Uncontrolled Recursion vulnerability in multiple products
ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call.
local
low complexity
qemu canonical opensuse CWE-674
6.0
2020-06-04 CVE-2019-20819 Uncontrolled Recursion vulnerability in Foxitsoftware Reader
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.
network
low complexity
foxitsoftware CWE-674
7.5
2020-06-04 CVE-2019-20815 Uncontrolled Recursion vulnerability in Foxitsoftware Phantompdf
An issue was discovered in Foxit PhantomPDF before 8.3.12.
network
low complexity
foxitsoftware CWE-674
7.5