Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

CVEs (874)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-0248 4Canonical DebianImagemagick+1 more 10Debian Linux Enterprise Linux DesktopEnterprise Linux Eus+7 more Apr 29, 2026 Jun 5, 2012 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF.
CVE-2011-4621 1Linux 1Linux Kernel Apr 29, 2026 May 17, 2012 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 The Linux kernel before 2.6.37 does not properly implement a certain clock-update optimization, which allows local users to cause a denial of service (system hang) via an application that executes code in a loop.
CVE-2011-2213 2Linux Redhat 6Enterprise Linux Aus Enterprise Linux DesktopEnterprise Linux Eus+3 more Apr 29, 2026 Aug 29, 2011 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via cra...Show more The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.Show less
CVE-2011-1142 1Wireshark 1Wireshark Apr 29, 2026 Mar 3, 2011 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Stack consumption vulnerability in the dissect_ber_choice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remote attackers to cause a denial of service (infinite loop)...Show more Stack consumption vulnerability in the dissect_ber_choice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remote attackers to cause a denial of service (infinite loop) via vectors involving self-referential ASN.1 CHOICE values.Show less
CVE-2011-1002 5Avahi CanonicalDebian+2 more 5Avahi Debian LinuxEnterprise Linux+2 more Apr 29, 2026 Feb 22, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability ex...Show more avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.Show less
CVE-2010-3880 2Debian Linux 2Debian Linux Linux Kernel Apr 29, 2026 Dec 10, 2010 N/A· v4 N/A· v3 4.9 MEDIUM· v2 net/ipv4/inet_diag.c in the Linux kernel before 2.6.37-rc2 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instr...Show more net/ipv4/inet_diag.c in the Linux kernel before 2.6.37-rc2 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message that contains multiple attribute elements, as demonstrated by INET_DIAG_BC_JMP instructions.Show less
CVE-2010-1282 1Adobe 1Shockwave Player Apr 29, 2026 May 13, 2010 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Adobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted ATOM size in a .dir (aka Director) file.
CVE-2009-2906 2Canonical Samba 2Samba Ubuntu Linux Apr 23, 2026 Oct 7, 2009 N/A· v4 N/A· v3 4.0 MEDIUM· v2 smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification rep...Show more smbd in Samba 3.0 before 3.0.37, 3.2 before 3.2.15, 3.3 before 3.3.8, and 3.4 before 3.4.2 allows remote authenticated users to cause a denial of service (infinite loop) via an unanticipated oplock break notification reply packet.Show less
CVE-2009-1270 3Canonical ClamavDebian 3Clamav Debian LinuxUbuntu Linux Apr 23, 2026 Apr 8, 2009 N/A· v4 N/A· v3 7.8 HIGH· v2 libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang.
CVE-2006-6499 3Canonical DebianMozilla 5Debian Linux FirefoxSeamonkey+2 more Apr 23, 2026 Dec 20, 2006 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced,...Show more The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins that reduce the precision.Show less
CVE-2005-2224 1Microsoft 1Asp.net Apr 16, 2026 Jul 12, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a crafted SOAP message to an RPC/Encoded method.
CVE-2005-0851 1Filezilla Project 1Filezilla Server Apr 16, 2026 May 2, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite loop) via certain file uploads or directory listings.
CVE-2004-0753 1Gnome 2Gdkpixbuf Gtk Apr 16, 2026 Oct 20, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted BMP file.
CVE-2004-0748 1Apache 1Http Server Apr 16, 2026 Oct 20, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.

Previous 1...40 41 42 4344