Weaknesses of type CWE-835

426 results

Loop infinito com condição de saída inalcançável

O programa entra em um loop (for, while, etc.) cuja condição de encerramento nunca pode ser verdadeira, causando uma execução infinita. Isso consome CPU indefinidamente, podendo derrubar a aplicação ou os serviços que dependem dela, caracterizando uma negação de serviço.

Example

Um servidor web processa requisições em um loop while(true) esperando receber um sinal de parada que nunca é enviado; ou um algoritmo incrementa uma variável de controle, mas a condição de saída compara com um valor que nunca será alcançado devido a overflow ou lógica errada.

How to mitigate

Revise toda lógica de condição de saída (teste se ela é realmente alcançável); implemente timeouts explícitos nos loops; adicione contadores de limite de iterações para forçar saída de segurança; use análise estática para detectar loops sem saída clara.

CVE-2025-20253HIGHCisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service VulnerabilityEPSS 0.4%CVE-2021-3468—A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socEPSS 0.4%CVE-2024-25710HIGHApache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP fileEPSS 0.4%CVE-2026-59849LOWLibssh: libssh: denial of service via automatic certificate authentication loopEPSS 0.4%CVE-2026-24802MEDIUMBuffer Overflow Vulnerability in briandilley/jsonrpc4jEPSS 0.4%CVE-2026-20054MEDIUMCisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Infinite Loop Denial of Service VulnerabilityEPSS 0.4%CVE-2026-39934MEDIUMGrowth Experiments ReassignMenteesJob runs as an infinite loopEPSS 0.4%CVE-2026-41146HIGHfacil.io and downstream iodine ruby gem vulnerable to uncontrolled resource consumption and loop with unreachable exit conditionEPSS 0.4%CVE-2025-71330HIGHimage-size 2.0.2 Denial of Service via Malformed ICNS Image ParsingEPSS 0.4%CVE-2025-71329HIGHimage-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF ParserEPSS 0.4%CVE-2026-16551MEDIUMDenial-of-Service in OpenCanary's MongoDB moduleEPSS 0.4%CVE-2026-8798HIGHNative entropy source retries the CPU entropy instructions without limitEPSS 0.4%CVE-2026-21507HIGHiccDEV is Vulnerable to Denial of Service via Infinite Loop in CalcProfileID()EPSS 0.4%CVE-2024-22654HIGHtcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c.EPSS 0.4%CVE-2023-52726MEDIUMOpen Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error (in the Subscribe funEPSS 0.4%CVE-2022-33238HIGHTransient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon CoEPSS 0.4%CVE-2026-14258MEDIUMDhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handlingEPSS 0.4%CVE-2026-2219HIGHIt was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data sEPSS 0.4%CVE-2026-31808MEDIUMfile-type affected by infinite loop in ASF parser on malformed input with zero-size sub-headerEPSS 0.4%CVE-2026-21905HIGHJunos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crashEPSS 0.4%