224 matches found
CVE-2025-36001
IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service using a specially crafted SQL statement including XML that performs uncontrolled recursion...
AZL-75830 CVE-2026-0994 affecting package protobuf for versions less than 25.3-6
A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can...
Amazon Linux 2023 : libxml2, libxml2-devel, libxml2-static (ALAS2023-2026-1360)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1360 advisory. A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads t...
AZL-74772 CVE-2026-0990 affecting package libxml2 for versions less than 2.10.4-10
A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a...
CVE-2026-0990
A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a...
PT-2026-22510
Name of the Vulnerable Software and Affected Versions Squirrel versions prior to 3.3 Description A flaw exists in the Squirrel compiler, specifically within the SQCompiler::Factor and SQCompiler::UnaryOP functions located in the squirrel/sqcompiler.cpp file. This issue allows for uncontrolled...
The vulnerability of the `handle_kernel_stack_overflow()` function in the `arch/riscv/include/asm/asm-prototypes.h` header on RISC-V architecture-based Linux operating system processors allows a hacker to trigger a service failure.
The vulnerability of the handlekernelstackoverflow function in the arch/riscv/include/asm/asm-prototypes.h header on RISC-V architecture processors in Linux operating systems is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a system failure...
CVE-2025-59789
Uncontrolled recursion in the json2pb component in Apache bRPC version 1.15.0 on all platforms allows remote attackers to make the server crash via sending deep recursive json data. Root Cause: The bRPC json2pb component uses rapidjson to parse json data from the network. The rapidjson parser use...
CVE-2025-59789 Apache bRPC: Stack Exhaustion via Unbounded Recursion in JSON Parser
Uncontrolled recursion in the json2pb component in Apache bRPC version 1.15.0 on all platforms allows remote attackers to make the server crash via sending deep recursive json data. Root Cause: The bRPC json2pb component uses rapidjson to parse json data from the network. The rapidjson parser use...
libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c
A flaw was found in libxstl/libxml2. The 'exsltDynMapFunction' function in libexslt/dynamic.c does not contain a recursion depth check, which may cause an infinite loop via a specially crafted XSLT document while handling 'dyn:map', leading to stack exhaustion and a local denial of service...
DEBIAN-CVE-2025-66031
Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This...
CVE-2025-66031 node-forge ASN.1 Unbounded Recursion
Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This...
CVE-2025-66031
Removed by vendor...
Security Bulletin: IBM Storage Insights is vulnerable to weakness related to Apache Commons Lang
Summary Vulnerabilities in Apache Commons Lang may affect IBM Storage Insights which could allow uncontrolled recursion. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with...
Vulnerability of the xe_exec_queue_create_class() function in the drivers/gpu/drm/xe/xe_exec_queue.c module – The DRI driver for Linux’s direct rendering infrastructure allows a attacker to trigger a service failure.
Vulnerability of the xeexecqueuecreateclass function in the drivers/gpu/drm/xe/xeexecqueue.c module – The drivers for Linux’s Direct Rendering Infrastructure DRI support are vulnerable due to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause service failure...
Security Bulletin: Uncontrolled Recursion vulnerability in Apache Commons Lang library affect Tivoli Netcool/OMNIbus WebGUI (CVE-2025-48924)
Summary Apache Commons Lang library is used by Tivoli Netcool/OMNIbus WebGUI as part of Filter builder, View builder, Tool admin, Menu admin and Event Viewer Preferences component. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang...
EulerOS 2.0 SP13 : protobuf (EulerOS-SA-2025-2307)
According to the versions of the protobuf packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups,...
The vulnerability of the SingleDocParser::HandleFlowSequence function in the C++ YAML library allows a attacker to cause a service failure.
The vulnerability of the SingleDocParser::HandleFlowSequence function in the C++ YAML library, Yaml-cpp, is related to an uncontrolled recursion. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created YAML file...
USN-7743-1 libxml2 vulnerability
Nikita Sveshnikov discovered that libxml2 incorrectly handled recursion when processing XPath expressions. An attacker could possibly use this issue to cause a denial of service...
