CWE-834 · Denial of Service
Excessive Iteration
98CVEs
SortMost likely exploited
98 CVEs with CWE-834 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-3128In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that ge…Asus · Zenwifi Ax (xt8) Firmware · 2021-04-12 | – | 16% | 2021-04-12 |
| CVE-2021-35515Apache Commons Compress 1.6 to 1.20 denial of service vulnerabilityApache Software Foundation · Apache Commons Compress · 2021-07-13 | – | 12% | 2021-07-13 |
| CVE-2021-39924Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture fileWireshark Foundation · Wireshark · CVSS 7.5 · 2021-11-19 | 7.5 | 5.3% | 2021-11-19 |
| CVE-2021-3125In TP-Link TL-XDR3230 < 1.0.12, TL-XDR1850 < 1.0.9, TL-XDR1860 < 1.0.14, TL-XDR3250 < 1.0.2, TL-XDR6060 Turbo < 1.1.8, TL-XDR5430 < 1.0.11, and possibly others, when IPv6 is used,…Tp-Link · Tl-Xdr3230 Firmware · 2021-04-12 | – | 4.5% | 2021-04-12 |
| CVE-2023-1993LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture fileWireshark Foundation · Wireshark · CVSS 6.3 · 2023-04-12 | 6.3 | 4.1% | 2023-04-12 |
| CVE-2018-14342In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by vali…Wireshark · Wireshark · 2018-07-19 | – | 3.7% | 2018-07-19 |
| CVE-2020-14303A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba ser…Samba · Samba · 2020-07-06 | – | 3.5% | 2020-07-06 |
| CVE-2021-4190Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture fileWireshark Foundation · Wireshark · CVSS 7.5 · 2021-12-30 | 7.5 | 3.3% | 2021-12-30 |
| CVE-2018-9133ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file…Imagemagick · Imagemagick · 2018-03-30 | – | 3.2% | 2018-03-30 |
| CVE-2018-11813libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.Ijg · Libjpeg · 2018-06-06 | – | 3.1% | 2018-06-06 |
| CVE-2021-31812A carefully crafted PDF file can trigger an infinite loop while loading the fileApache Software Foundation · Apache PDFBox · 2021-06-12 | – | 3.1% | 2021-06-12 |
| CVE-2021-27807A carefully crafted PDF file can trigger an infinite loop while loading the fileApache Software Foundation · Apache PDFBox · 2021-03-19 | – | 3.0% | 2021-03-19 |
| CVE-2018-9261In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overflow. This was addressed in epan/dissector…Wireshark · Wireshark · 2018-04-04 | – | 2.8% | 2018-04-04 |
| CVE-2019-3565Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients co…Facebook · Facebook Thrift · 2019-05-06 | – | 2.8% | 2019-05-06 |
| CVE-2020-35573srs2.c in PostSRSd before 1.10 allows remote attackers to cause a denial of service (CPU consumption) via a long timestamp tag in an SRS address.Postsrsd Project · Postsrsd · 2020-12-20 | – | 2.7% | 2020-12-20 |
| CVE-2019-12973In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of servic…Uclouvain · Openjpeg · 2019-06-26 | – | 2.6% | 2019-06-26 |
| CVE-2018-7323In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by ensuring that a calculated length was monotonically increasin…Wireshark · Wireshark · 2018-02-23 | – | 2.5% | 2018-02-23 |
| CVE-2017-14222In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MOV file, which cl…Ffmpeg · Ffmpeg · 2017-09-09 | – | 2.4% | 2017-09-09 |
| CVE-2022-0585Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted capture fileWireshark Foundation · Wireshark · CVSS 4.3 · 2022-02-18 | 4.3 | 2.4% | 2022-02-18 |
| CVE-2017-13776GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version!=10 case that results in the reader not returning; it would c…Graphicsmagick · Graphicsmagick · 2017-08-30 | – | 2.4% | 2017-08-30 |
| CVE-2017-11505The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consum…Imagemagick · Imagemagick · 2017-07-21 | – | 2.3% | 2017-07-21 |
| CVE-2017-11409In Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop. This was addressed in epan/dissectors/packet-gprs-llc.c by using a different integer data type.Wireshark · Wireshark · 2017-07-18 | – | 2.3% | 2017-07-18 |
| CVE-2017-14174In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, w…Imagemagick · Imagemagick · 2017-09-07 | – | 2.2% | 2017-09-07 |
| CVE-2017-14172In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims…Imagemagick · Imagemagick · 2017-09-07 | – | 2.2% | 2017-09-07 |
| CVE-2017-13777GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version==10 case that results in the reader not returning; it would c…Graphicsmagick · Graphicsmagick · 2017-08-30 | – | 2.1% | 2017-08-30 |
| CVE-2017-14175In coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in ReadXBMImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted XBM file, which clai…Imagemagick · Imagemagick · 2017-09-07 | – | 2.1% | 2017-09-07 |
| CVE-2017-17914In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (ReadOneMNGImage large…Imagemagick · Imagemagick · 2017-12-26 | – | 2.1% | 2017-12-26 |
| CVE-2017-12587ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c.Imagemagick · Imagemagick · 2017-08-06 | – | 2.0% | 2017-08-06 |
| CVE-2019-3558Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which wo…Facebook · Facebook Thrift · 2019-05-06 | – | 2.0% | 2019-05-06 |
| CVE-2019-3564Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would…Facebook · Facebook Thrift · 2019-05-06 | – | 2.0% | 2019-05-06 |
| CVE-2019-3559Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which woul…Facebook · Facebook Thrift · 2019-05-06 | – | 2.0% | 2019-05-06 |
| CVE-2019-3552C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short message…Facebook · Facebook Thrift · 2019-05-06 | – | 2.0% | 2019-05-06 |
| CVE-2017-14056In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted RL2 file, wh…Ffmpeg · Ffmpeg · 2017-08-31 | – | 1.8% | 2017-08-31 |
| CVE-2017-14055In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MV file, wh…Ffmpeg · Ffmpeg · 2017-08-31 | – | 1.8% | 2017-08-31 |
| CVE-2017-14057In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted ASF file, which claims a large "n…Ffmpeg · Ffmpeg · 2017-08-31 | – | 1.8% | 2017-08-31 |
| CVE-2017-11188The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF che…Imagemagick · Imagemagick · 2017-07-12 | – | 1.8% | 2017-07-12 |
| CVE-2017-14059In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" fie…Ffmpeg · Ffmpeg · 2017-08-31 | – | 1.8% | 2017-08-31 |
| CVE-2017-14171In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted NSV fi…Ffmpeg · Ffmpeg · 2017-09-07 | – | 1.8% | 2017-09-07 |
| CVE-2017-14170In libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, a DoS in mxf_read_index_entry_array() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted MX…Ffmpeg · Ffmpeg · 2017-09-07 | – | 1.8% | 2017-09-07 |
| CVE-2017-14054In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivr_read_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted IVR file, which claim…Ffmpeg · Ffmpeg · 2017-08-31 | – | 1.7% | 2017-08-31 |
| CVE-2021-43545Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.Mozilla · Thunderbird · 2021-12-08 | – | 1.7% | 2021-12-08 |
| CVE-2018-7321In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was addressed by not proceeding with dissection after encountering an unexpe…Wireshark · Wireshark · 2018-02-23 | – | 1.7% | 2018-02-23 |
| CVE-2021-39204Excessive CPU usage in Pomeriumpomerium · pomerium · CVSS 7.5 · 2021-09-09 | 7.5 | 1.7% | 2021-09-09 |
| CVE-2017-12674In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service.Imagemagick · Imagemagick · 2017-08-07 | – | 1.6% | 2017-08-07 |
| CVE-2021-39923Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture fileWireshark Foundation · Wireshark · CVSS 7.5 · 2021-11-19 | 7.5 | 1.6% | 2021-11-19 |
| CVE-2019-9547In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e., virtual machine) could carefully construct a circular descriptor chain that would resul…Spdk · Storage Performance Development Kit · 2019-03-01 | – | 1.5% | 2019-03-01 |
| CVE-2023-26513Apache Sling Resource Merger: Requests to certain paths managed by the Apache Sling Resource Merger can lead to DoSApache Software Foundation · Apache Sling Resource Merger · CVSS 7.5 · 2023-03-20 | 7.5 | 1.5% | 2023-03-20 |
| CVE-2018-20805Invariant with $elemMatchMongoDB Inc. · MongoDB Server · CVSS 6.5 · 2020-11-23 | 6.5 | 1.2% | 2020-11-23 |
| CVE-2021-32778Excessive CPU utilization when closing HTTP/2 streamsenvoyproxy · envoy · CVSS 5.8 · 2021-08-24 | 5.8 | 1.2% | 2021-08-24 |
| CVE-2018-11507An issue was discovered in Free Lossless Image Format (FLIF) 0.3. An attacker can trigger a long loop in image_load_pnm in image/image-pnm.cpp.Flif · Flif · 2018-05-28 | – | 1.1% | 2018-05-28 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.