CWE-674 vulnerabilities

MongoDB Server may be susceptible to stack overflow due to JSON parsing mechanism, where specifically crafted JSON inputs may induce unwarranted levels of recursion, resulting in excessive stack space consumption. Such inputs can lead to a stack overflow that causes the server to crash which could occur pre-authorisation. This issue affects MongoDB Server v7.0 versions prior to 7.0.17 and MongoDB Server v8.0 versions prior to 8.0.5. The same issue affects MongoDB Server v6.0 versions prior to 6.0.21, but an attacker can only induce denial of service after authenticating.

Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashing the application with a RecursionError. We recommend upgrading to version =>6.31.1 or beyond commit 17838beda2943d08b8a9d4df5b68f5f04f26d901

In ims service, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01394606; Issue ID: MSV-2739.

A vulnerability in the `KnowledgeBaseWebReader` class of the run-llama/llama_index repository, version latest, allows an attacker to cause a Denial of Service (DoS) by controlling a URL variable to contain the root URL. This leads to infinite recursive calls to the `get_article_urls` method, exhausting system resources and potentially crashing the application.

CVE-2024-8176 is a stack overflow vulnerability in the libexpat XML parsing library caused by uncontrolled recursion during entity expansion. Parsing XML documents with deeply nested entity references can exhaust stack space, leading to crashes. This may result in denial of service or potentially exploitable memory corruption depending on usage context. Red Hat has issued security advisories addressing this flaw with updates available for affected products including Red Hat JBoss Core Services and Red Hat Enterprise Linux 9.4 Extended Update Support.

Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file

A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting.

cpdf through 2.8 allows stack consumption via a crafted PDF document.

CVE-2024-53090 is a high-severity vulnerability in the Linux kernel related to the AFS filesystem. It involves a lock recursion issue in the afs_wake_up_async_call() function, which can cause a spinlock recursion bug leading to kernel crashes (oops). This occurs because the function may try to reacquire a lock it already holds indirectly through a callback, causing deadlock. The issue is uncommon but can disrupt kernel stability.

CVE-2024-31228 is a vulnerability in Redis where authenticated users can cause a denial-of-service by triggering uncontrolled recursion through specially crafted long string match patterns on commands like KEYS, SCAN, PSUBSCRIBE, FUNCTION LIST, COMMAND LIST, and ACL definitions. This leads to stack overflow and process crash. The issue is fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. No workarounds are known, so upgrading is recommended.

Red Hat has released an important security update for its build of Apache Camel 4.4.2 for Spring Boot addressing multiple vulnerabilities, including an information leakage issue in Undertow's Proxy Protocol parsing (CVE-2024-7885), an unrestricted memory consumption vulnerability in Apache CXF HTTP clients (CVE-2024-5971), and a vulnerability in Spring Expression (CVE-2024-38808). The update fixes these issues and is recommended for users to apply promptly. Related fixes for CVE-2024-5971 are also included in Red Hat JBoss Enterprise Application Platform 8.0.2. These vulnerabilities have been rated as important by Red Hat Product Security.

A Denial-of-Service (DoS) vulnerability exists in the `SitemapLoader` class of the `langchain-ai/langchain` repository, affecting all versions. The `parse_sitemap` method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap itself. This oversight allows for the possibility of an infinite loop, leading to a crash by exceeding the maximum recursion depth in Python. This vulnerability can be exploited to occupy server socket/port resources and crash the Python process, impacting the availability of services relying on this functionality.

Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.

Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of Service when sending a crafted, chunked, encoded HTTP Message. This bug is fixed in Squid version 6.8. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. There is no workaround for this issue.

Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file

CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file