CWE-674: Uncontrolled Recursion, page 11

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

What the weakness is: CWE-674 at MITRE

1. 5.5CVE-2021-39257EPSS 0.4%2021-09-07

   A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain (starting from ntfs_attr_pwrite), causing stack consumption in NTFS-3G < 2021.8.22.

2. 6.5CVE-2020-18898EPSS 1.4%2021-08-19

   A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a crafted file.

3. 7.5CVE-2021-38569EPSS 1.0%2021-08-11

   An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects.

4. 7.5CVE-2021-38566EPSS 1.0%2021-08-11

   An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of embedded XML nodes.

5. 6.5CVE-2021-22144EPSS 2.4%2021-07-26

   In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries t…

6. 7.5CVE-2021-36773EPSS 1.3%2021-07-18

   uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to cause a denial of service (unbounded recursion that can trigger memory consumption …

7. 7.5CVE-2021-36154EPSS 2.1%2021-07-09

   HTTP2ToRawGRPCServerCodec in gRPC Swift 1.1.1 and earlier allows remote attackers to deny service via the delivery of many small messages within a single HTTP/2 frame, leading to Uncontrolled Recursion and stack consumption.

8. 6.5CVE-2020-20213EPSS 2.1%2021-07-07

   Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an stack exhaustion vulnerability in the /nova/bin/net process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.

9. 7.8CVE-2021-28210EPSS 0.4%2021-06-11

   An unlimited recursion in DxeCore in EDK II.

10. 7.5CVE-2021-3530EPSS 2.4%2021-06-02

    A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash.

11. 5.5CVE-2020-36375EPSS 0.8%2021-05-28

    Stack overflow vulnerability in parse_equality Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

12. 5.5CVE-2020-36374EPSS 0.8%2021-05-28

    Stack overflow vulnerability in parse_comparison Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

13. 5.5CVE-2020-36373EPSS 0.8%2021-05-28

    Stack overflow vulnerability in parse_shifts Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

14. 5.5CVE-2020-36372EPSS 0.8%2021-05-28

    Stack overflow vulnerability in parse_plus_minus Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

15. 5.5CVE-2020-36371EPSS 0.8%2021-05-28

    Stack overflow vulnerability in parse_mul_div_rem Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

16. 5.5CVE-2020-36370EPSS 0.8%2021-05-28

    Stack overflow vulnerability in parse_unary Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

17. 5.5CVE-2020-36369EPSS 0.8%2021-05-28

    Stack overflow vulnerability in parse_statement_list Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

18. 5.5CVE-2020-36368EPSS 0.8%2021-05-28

    Stack overflow vulnerability in parse_statement Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

19. 5.5CVE-2020-36367EPSS 0.8%2021-05-28

    Stack overflow vulnerability in parse_block Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

20. 5.5CVE-2020-36366EPSS 0.8%2021-05-28

    Stack overflow vulnerability in parse_value Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

21. 5.5CVE-2020-18392EPSS 0.9%2021-05-28

    Stack overflow vulnerability in parse_array Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

22. 5.9CVE-2021-31525EPSS 3.7%2021-05-27

    net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configuration…

23. 5.5CVE-2021-30471EPSS 0.7%2021-05-26

    A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call in PdfNamesTree::AddToDictionary function in src/podofo/doc/PdfNamesTree.cpp can lead to a stack overflow.

24. 5.5CVE-2021-30470EPSS 0.7%2021-05-26

    A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray(), PdfTokenizer::GetNextVariant() and PdfTokenizer::ReadDataType() functions can lead to a stack overflow.

25. 7.5CVE-2021-28903EPSS 2.4%2021-05-20

    A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem(). lyxml_parse_elem() function will be called recursively, which will consume stack space and lead to crash.

26. 7.5CVE-2021-27432EPSS 1.9%2021-05-20

    OPC Foundation UA .NET Standard versions prior to 1.4.365.48 and OPC UA .NET Legacy are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a stack overflow.

27. 7.5CVE-2021-27434EPSS 1.7%2021-05-20

    Products with Unified Automation .NET based OPC UA Client/Server SDK Bundle: Versions V3.0.7 and prior (.NET 4.5, 4.0, and 3.5 Framework versions only) are vulnerable to an uncontrolled recursion, which may allow an attacker to trigger a s…

28. 5.5CVE-2021-29615EPSS 0.2%2021-05-14

    TensorFlow is an end-to-end open source platform for machine learning. The implementation of `ParseAttrValue`(https://github.com/tensorflow/tensorflow/blob/c22d88d6ff33031aa113e48aa3fc9aa74ed79595/tensorflow/core/framework/attr_value_util.…

29. 7.8CVE-2021-29591EPSS 0.3%2021-05-14

    TensorFlow is an end-to-end open source platform for machine learning. TFlite graphs must not have loops between nodes. However, this condition was not checked and an attacker could craft models that would result in infinite loop during ev…

30. 7.5CVE-2021-21359EPSS 1.7%2021-03-23

    TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.25, 10.4.14, 11.1.1 requesting invalid or non-existing resources via HTTP triggers the page error handler which again could retrieve content to b…

31. 7.5CVE-2020-1898EPSS 1.2%2021-03-11

    The fb_unserialize function did not impose a depth limit for nested deserialization. That meant a maliciously constructed string could cause deserialization to recurse, leading to stack exhaustion. This issue affected HHVM prior to v4.32.3…

32. 5.5CVE-2021-20255EPSS 0.4%2021-03-09

    A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process …

33. 7.5CVE-2021-28040EPSS 1.2%2021-03-05

    An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in _ReadElem without restriction, an attacker can tri…

34. 5.5CVE-2020-29566EPSS 0.4%2020-12-15

    An issue was discovered in Xen through 4.14.x. When they require assistance from the device model, x86 HVM guests must be temporarily de-scheduled. The device model will signal Xen when it has completed its operation, via an event channel,…

35. 7.5CVE-2020-8285EPSS 9.8%2020-12-14

    curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

36. 7.5CVE-2020-26883EPSS 1.4%2020-11-06

    In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents.

37. 7.5CVE-2020-26882EPSS 1.4%2020-11-06

    In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input.

38. 7.5CVE-2020-28196EPSS 4.4%2020-11-06

    MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.

39. 6.5CVE-2020-28242EPSS 1.5%2020-11-06

    An issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x before 17.8.1, and 18.x before 18.0.1 and Certified Asterisk before 16.8-cert5. If Asterisk is challenged on an outbound INVITE and the nonce is…

40. 7.5CVE-2020-9861EPSS 1.5%2020-11-02

    A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input.

41. 7.5CVE-2020-25219EPSS 4.4%2020-09-09

    url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. This leads to stack exhaustion.

42. 7.5CVE-2020-12100EPSS 5.3%2020-08-12

    In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service (resource consumption) via a crafted e-mail message with deeply nested MIME parts.

43. 5.5CVE-2020-9243EPSS 0.5%2020-08-10

    HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a denial of service vulnerability. The system does not properly limit the depth of recursion, an attacker should trick the user installing and execute a malicious appli…

44. 7.5CVE-2020-16094EPSS 1.8%2020-07-28

    In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree.

45. 3.3CVE-2020-15101EPSS 0.7%2020-07-14

    In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can interrupt a freewvs scan due to Python's recursion limit and os.walk(). This can be problematic in a case where an administrator scans the dirs of pote…

46. 7.5CVE-2020-5591EPSS 1.6%2020-06-05

    XACK DNS 1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions before 1.7.0 allow remote attackers to cause a denial of service condition resulting in degradation of the recursive resolver's performance or comp…

47. 6.0CVE-2020-13800EPSS 0.5%2020-06-04

    ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call.

48. 7.5CVE-2019-20819EPSS 1.6%2020-06-04

    An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing.

49. 7.5CVE-2019-20815EPSS 1.6%2020-06-04

    An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML parsing.

50. 7.5CVE-2020-13164EPSS 3.0%2020-05-19

    In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a cycle in the directory graph on a filesys…