Fallos del tipo CWE-835

424 resultados

Loop infinito com condição de saída inalcançável

A aplicação entra em um loop (iteração) cuja condição de parada nunca é verdadeira ou nunca é checada, trancando a execução indefinidamente. Isso causa travamento, consumo excessivo de CPU, negação de serviço ou congelamento de funcionalidades críticas.

Ejemplo

Um servidor web com while(true) lendo dados de rede, mas a condição de encerramento da conexão nunca é avaliada corretamente; ou um aplicativo mobile em loop aguardando uma resposta de API que nunca chega, sem timeout definido.

Cómo mitigar

Sempre defina condições de saída claras e alcançáveis (break, return, exceção); implemente timeouts em operações de I/O e loops que dependem de eventos externos; use ferramentas de análise estática para detectar loops sem saída óbvia; considere usar watchdogs ou sinais de interrupção como fallback.

CVE-2026-24802MEDIUMBuffer Overflow Vulnerability in briandilley/jsonrpc4jEPSS 0.4%CVE-2026-71436MEDIUMMermaid XY Charts are vulnerable to an infinite loop DoSEPSS 0.4%CVE-2022-25734HIGHLoop with Unreachable Exit Condition in MODEMEPSS 0.4%CVE-2026-20154HIGHCisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of ServiceEPSS 0.4%CVE-2025-7054HIGHInfinite loop triggered by connection ID retirementEPSS 0.4%CVE-2021-31363MEDIUMJunos OS and Junos OS Evolved: Receipt of a specific LDP message will cause a Denial of ServiceEPSS 0.4%CVE-2025-42954LOWDenial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application)EPSS 0.4%CVE-2026-61556HIGHLiquidJS: An infinite loop vulnerability in `strip_html` filterEPSS 0.4%CVE-2026-44740MEDIUMgo-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustionEPSS 0.4%CVE-2026-62949MEDIUMAsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATIONEPSS 0.4%CVE-2025-20312HIGHA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attEPSS 0.4%CVE-2025-69227MEDIUMAIOHTTP vulnerable to DoS when bypassing assertsEPSS 0.4%CVE-2023-50763MEDIUMA vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX0EPSS 0.4%CVE-2026-17229HIGHIBM i is Affected By Multiple Vulnerabilities in Host ServersEPSS 0.4%CVE-2026-17004HIGHIBM i is Affected By Multiple Vulnerabilities in Host ServersEPSS 0.4%CVE-2026-16931HIGHIBM i is Affected By A Denial of Service Vulnerability []EPSS 0.4%CVE-2026-78543MEDIUMIBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEsEPSS 0.4%CVE-2020-25641—A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the blocEPSS 0.4%CVE-2020-14394—An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) EPSS 0.4%CVE-2026-41150MEDIUMMermaid Gantt Charts are vulnerable to an Infinite Loop DoSEPSS 0.4%