Excessive Iteration

Every one of the 98 is a mark on the map. Named now: 1 to 26, most at risk first.

1. In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that ge…CVE-2021-312816% likely
2. Apache Commons Compress 1.6 to 1.20 denial of service vulnerabilityCVE-2021-35515Apache Software Foundation · 12% likely

   Apache

3. Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture fileCVE-2021-39924Wireshark Foundation · CVSS 7.5 · 5.3% likely

   Wireshark Foundation

4. In TP-Link TL-XDR3230 < 1.0.12, TL-XDR1850 < 1.0.9, TL-XDR1860 < 1.0.14, TL-XDR3250 < 1.0.2, TL-XDR6060 Turbo < 1.1.8, TL-XDR5430 < 1.0.11, and possibly others, when IPv6 is used,…CVE-2021-31254.5% likely
5. LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture fileCVE-2023-1993Wireshark Foundation · CVSS 6.3 · 4.1% likely

   Wireshark Foundation

6. In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by vali…CVE-2018-143423.7% likely
7. A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba ser…CVE-2020-14303Samba · 3.5% likely
8. Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture fileCVE-2021-4190Wireshark Foundation · CVSS 7.5 · 3.3% likely

   Wireshark Foundation

9. ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file…CVE-2018-91333.2% likely
10. libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.CVE-2018-118133.1% likely
11. A carefully crafted PDF file can trigger an infinite loop while loading the fileCVE-2021-31812Apache Software Foundation · 3.1% likely

    Apache

12. A carefully crafted PDF file can trigger an infinite loop while loading the fileCVE-2021-27807Apache Software Foundation · 3.0% likely

    Apache

13. In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overflow. This was addressed in epan/dissector…CVE-2018-92612.8% likely
14. Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients co…CVE-2019-3565Facebook · 2.8% likely

    Meta (Facebook)

15. srs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service (CPU consumption) via a long timestamp tag in an SRS address.CVE-2020-355732.7% likely
16. In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of servic…CVE-2019-129732.6% likely
17. In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by ensuring that a calculated length was monotonically increasin…CVE-2018-73232.5% likely
18. In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MOV file, which cl…CVE-2017-142222.4% likely
19. Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted capture fileCVE-2022-0585Wireshark Foundation · CVSS 4.3 · 2.4% likely

    Wireshark Foundation

20. GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version!=10 case that results in the reader not returning; it would c…CVE-2017-137762.4% likely
21. The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consum…CVE-2017-115052.3% likely
22. In Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop. This was addressed in epan/dissectors/packet-gprs-llc.c by using a different integer data type.CVE-2017-114092.3% likely
23. In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, w…CVE-2017-141742.2% likely
24. In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims…CVE-2017-141722.2% likely
25. GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version==10 case that results in the reader not returning; it would c…CVE-2017-137772.1% likely
26. In coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in ReadXBMImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted XBM file, which clai…CVE-2017-141752.1% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.