Browse CVEs

HIGH 7.5 CVE-2026-43871 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thr… Thrift 0.24.0+ Fix from $1,9502026-07-27 HIGH 7.3 CVE-2026-44186 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled ba… HTTP Server 2.4.68+ Fix from $1,9502026-06-08 HIGH 7.5 CVE-2024-24746 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache NimBLE.  Specially crafted GATT operation can cause infinite loop in … Nimble 1.7.0+ Fix from $1,9502024-04-06 MEDIUM 5.5 CVE-2024-25710 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 … Commons Compress 1.26.0+ Fix from $1,6002024-02-19 HIGH 7.5 CVE-2022-35724 It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications usin… Avro 0.14.0+ Fix from $1,9502022-08-09 MEDIUM 6.5 CVE-2022-23437 There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the Xe… Xerces J 9.0+ Fix from $1,6002022-01-24 MEDIUM 6.5 CVE-2021-40111 In Apache James, while fuzzing with Jazzer the IMAP parsing stack, we discover that crafted APPEND and STATUS IMAP command could be used to trigger i… James 3.6.1+ Fix from $1,6002022-01-04 MEDIUM 6.5 CVE-2021-41973 In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the H… Mina 2.0.22 / 2.1.5+ Fix from $1,6002021-11-01 HIGH 7.5 CVE-2021-41079EPSS 7% Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets. When Tomcat was configured … Tomcat 8.5.64 / 9.0.44+ Fix from $1,9502021-09-16 HIGH 7.5 CVE-2021-35515EPSS 12% When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This cou… Commons Compress after 18.3 Fix from $1,9502021-07-13 HIGH 7.5 CVE-2021-30468EPSS 7% A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thr… Cxf 3.3.11 / 3.4.4+ Fix from $1,9502021-06-16 MEDIUM 5.5 CVE-2021-31812 In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 a… Pdfbox after 2.0.23 Fix from $1,6002021-06-12 MEDIUM 5.5 CVE-2021-28657 A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade … Tika after 17.12 Fix from $1,6002021-03-31 HIGH 7.5 CVE-2020-13935EPSS 87% The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and … Tomcat after 9.0.36 Fix from $1,9502020-07-14 MEDIUM 5.5 CVE-2020-9489 A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory error… Tika after 17.12 Fix from $1,6002020-04-27 MEDIUM 5.5 CVE-2020-1951 A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23. Tika after 1.23 Fix from $1,6002020-03-23 HIGH 7.5 CVE-2019-0205EPSS 9% In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because… Thrift after 0.12.0 Fix from $1,9502019-10-29 HIGH 7.5 CVE-2019-12402EPSS 16% The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially craf… Commons Compress after 14.4.0 Fix from $1,9502019-08-30 HIGH 7.5 CVE-2018-17202 Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be use… Commons Imaging Mitigation only Fix from $1,9502019-05-06 MEDIUM 6.5 CVE-2018-17197EPSS 6% A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika. Tika after 1.19.1 Fix from $1,6002018-12-24 MEDIUM 5.5 CVE-2018-8017 In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser. Tika after 1.18 Fix from $1,6002018-09-19 MEDIUM 5.5 CVE-2018-11771EPSS 5% When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputStream can fail to return the c… Commons Compress after 1.17.0 Fix from $1,6002018-08-16 HIGH 7.5 CVE-2018-1336EPSS 21% An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Se… Tomcat after 9.0.7 Fix from $1,9502018-08-02 MEDIUM 6.5 CVE-2018-8036 In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of m… Pdfbox after 2.0.10 Fix from $1,6002018-07-03 MEDIUM 5.5 CVE-2018-1338 A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18. Tika 1.18+ Fix from $1,6002018-04-25 MEDIUM 5.5 CVE-2018-1339 A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18. Tika 1.18+ Fix from $1,6002018-04-25 MEDIUM 5.5 CVE-2018-1324 A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and Z… Commons Compress after 8.0.27 Fix from $1,6002018-03-16 HIGH 7.5 CVE-2017-12626EPSS 10% Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1) Infinite Loops while parsing crafted WMF, EMF, MSG and m… Poi 3.17+ Fix from $1,9502018-01-29 HIGH 7.5 CVE-2016-6817EPSS 7% The HTTP/2 header parser in Apache Tomcat 9.0.0.M1 to 9.0.0.M11 and 8.5.0 to 8.5.6 entered an infinite loop if a header was received that was larger … Tomcat Mitigation only Fix from $1,9502017-08-10 MEDIUM 5.0 CVE-2004-0748EPSS 22% mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way th… HTTP Server 2.0.51+ Fix from $1,6002004-10-20