← Back
CWE-674

462 CVEs • Abstraction: Class

Uncontrolled Recursion

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

JSON object

Loading...

CVEs (462)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2007-3409
3Canonical
DebianNet Dns
3Debian Linux
Net\Ubuntu Linux
Apr 23, 2026
Jun 26, 2007
N/A· v4
7.5 HIGH· v3
4.3 MEDIUM· v2
Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop.
CVE-2007-1285
5Canonical
NovellPhp+2 more
7Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+4 more
Apr 23, 2026
Mar 6, 2007
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable...Show more
The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.Show less