Vulnerability index

Browse CVEs

30 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Infinite LoopCWE-835 × clear
Thrift HIGH 7.5
CVE-2026-43871

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thr…

Fix: 0.24.0+
Fix from $1,950 2026-07-27
HTTP Server HIGH 7.3
CVE-2026-44186

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled ba…

Fix: 2.4.68+
Fix from $1,950 2026-06-08
Nimble HIGH 7.5
CVE-2024-24746

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache NimBLE.  Specially crafted GATT operation can cause infinite loop in …

Fix: 1.7.0+
Fix from $1,950 2024-04-06
Commons Compress MEDIUM 5.5
CVE-2024-25710

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 …

Fix: 1.26.0+
Fix from $1,600 2024-02-19
Avro HIGH 7.5
CVE-2022-35724

It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications usin…

Fix: 0.14.0+
Fix from $1,950 2022-08-09
Xerces J MEDIUM 6.5
CVE-2022-23437

There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the Xe…

Fix: 9.0+
Fix from $1,600 2022-01-24
James MEDIUM 6.5
CVE-2021-40111

In Apache James, while fuzzing with Jazzer the IMAP parsing stack, we discover that crafted APPEND and STATUS IMAP command could be used to trigger i…

Fix: 3.6.1+
Fix from $1,600 2022-01-04
Mina MEDIUM 6.5
CVE-2021-41973

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the H…

Fix: 2.0.22 / 2.1.5+
Fix from $1,600 2021-11-01
Tomcat HIGH 7.5
CVE-2021-41079EPSS 7%

Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets. When Tomcat was configured …

Fix: 8.5.64 / 9.0.44+
Fix from $1,950 2021-09-16
Commons Compress HIGH 7.5
CVE-2021-35515EPSS 12%

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This cou…

Fix: after 18.3
Fix from $1,950 2021-07-13
Cxf HIGH 7.5
CVE-2021-30468EPSS 7%

A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thr…

Fix: 3.3.11 / 3.4.4+
Fix from $1,950 2021-06-16
Pdfbox MEDIUM 5.5
CVE-2021-31812

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 a…

Fix: after 2.0.23
Fix from $1,600 2021-06-12
Tika MEDIUM 5.5
CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade …

Fix: after 17.12
Fix from $1,600 2021-03-31
Tomcat HIGH 7.5
CVE-2020-13935EPSS 87%

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and …

Fix: after 9.0.36
Fix from $1,950 2020-07-14
Tika MEDIUM 5.5
CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory error…

Fix: after 17.12
Fix from $1,600 2020-04-27
Tika MEDIUM 5.5
CVE-2020-1951

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.

Fix: after 1.23
Fix from $1,600 2020-03-23
Thrift HIGH 7.5
CVE-2019-0205EPSS 9%

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because…

Fix: after 0.12.0
Fix from $1,950 2019-10-29
Commons Compress HIGH 7.5
CVE-2019-12402EPSS 16%

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially craf…

Fix: after 14.4.0
Fix from $1,950 2019-08-30
Commons Imaging HIGH 7.5
CVE-2018-17202

Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be use…

Mitigation only
Fix from $1,950 2019-05-06
Tika MEDIUM 6.5
CVE-2018-17197EPSS 6%

A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.

Fix: after 1.19.1
Fix from $1,600 2018-12-24
Tika MEDIUM 5.5
CVE-2018-8017

In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser.

Fix: after 1.18
Fix from $1,600 2018-09-19
Commons Compress MEDIUM 5.5
CVE-2018-11771EPSS 5%

When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputStream can fail to return the c…

Fix: after 1.17.0
Fix from $1,600 2018-08-16
Tomcat HIGH 7.5
CVE-2018-1336EPSS 21%

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Se…

Fix: after 9.0.7
Fix from $1,950 2018-08-02
Pdfbox MEDIUM 6.5
CVE-2018-8036

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of m…

Fix: after 2.0.10
Fix from $1,600 2018-07-03
Tika MEDIUM 5.5
CVE-2018-1338

A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18.

Fix: 1.18+
Fix from $1,600 2018-04-25
Tika MEDIUM 5.5
CVE-2018-1339

A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18.

Fix: 1.18+
Fix from $1,600 2018-04-25
Commons Compress MEDIUM 5.5
CVE-2018-1324

A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and Z…

Fix: after 8.0.27
Fix from $1,600 2018-03-16
Poi HIGH 7.5
CVE-2017-12626EPSS 10%

Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1) Infinite Loops while parsing crafted WMF, EMF, MSG and m…

Fix: 3.17+
Fix from $1,950 2018-01-29
Tomcat HIGH 7.5
CVE-2016-6817EPSS 7%

The HTTP/2 header parser in Apache Tomcat 9.0.0.M1 to 9.0.0.M11 and 8.5.0 to 8.5.6 entered an infinite loop if a header was received that was larger …

Mitigation only
Fix from $1,950 2017-08-10
HTTP Server MEDIUM 5.0
CVE-2004-0748EPSS 22%

mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way th…

Fix: 2.0.51+
Fix from $1,600 2004-10-20