Threats Tagged 'cwe-674'

This update includes the following RPMs: p11-kit: * mingw32-p11-kit-0.26.4-1.hum1 (noarch) * mingw64-p11-kit-0.26.4-1.hum1 (noarch) * p11-kit-0.26.4-1.hum1 (aarch64, x86_64) * p11-kit-client-0.26.4-1.hum1 (aarch64, x86_64) * p11-kit-devel-0.26.4-1.hum1 (aarch64, x86_64) * p11-kit-server-0.26.4-1.hum1 (aarch64, x86_64) * p11-kit-trust-0.26.4-1.hum1 (aarch64, x86_64) * p11-kit-0.26.4-1.hum1.src (src) Security Fix(es): p11-kit: * CVE-2026-13757

Uncontrolled Recursion, Uncontrolled Resource Consumption vulnerability in Apache IoTDB. When pipe_air_gap_receiver_enabled=true, the IoTDB AirGap receiver's readLength method calls itself recursively each time it recognises the E-language prefix in socket data, with no depth limit. An unauthenticated attacker can send a stream of repeated E-language prefixes that drives the recursion arbitrarily deep, exhausting the receiver thread's JVM stack and raising StackOverflowError. This issue affects Apache IoTDB: from 1.0.0 before 2.0.10. Users are recommended to upgrade to version 2.0.10, which fixes the issue.

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the Include directive in src/mistune/directives/include.py detects only direct self-includes and not indirect cycles, allowing two markdown files that include each other to trigger unbounded recursion, raise RecursionError, and crash the rendering request. This issue is fixed in version 3.3.0.

Mojo::JSON versions before 9.47 for Perl contain an uncontrolled recursion vulnerability in the pure-Perl JSON decoder. This flaw allows a crafted deeply nested JSON document to cause excessive memory consumption, leading to denial of service. The issue occurs when the pure-Perl decode path is used, which is the default if Cpanel::JSON::XS is not installed or disabled. The fast path using Cpanel::JSON::XS is not affected. This vulnerability has a medium severity rating with a CVSS score of 6.5.

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted query that causes excessive resource consumption while the request is processed, which may render the affected node unavailable.

The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. From 2.0.0-preview11 until 2.7.5 and 3.5.4, a small OpenAPI document containing a circular schema reference can cause process termination through stack overflow in Microsoft.OpenApi. The issue affects OpenAPI document parsing through public OpenAPI.NET reader APIs and has been confirmed across both JSON and YAML reader paths. This vulnerability is fixed in 2.7.5 and 3.5.4.

Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecode recurses once per nested list or dictionary level with no depth cap, and each recursive call receives the remaining buffer by value while the list and dictionary branches capture the whole remainder, so every live recursion frame keeps its own copy of the shrinking buffer (O(N^2) bytes for an N-deep input). The decoder runs on every untrusted bencode source: .torrent files, BEP09 metadata fetched from peers, DHT messages, and tracker responses. A bencoded input of roughly 150,000 nested lists (about 150 KB on the wire) drives multi-gigabyte peak memory, so one short message from any peer, or one crafted .torrent file or magnet link, terminates the client.

CVE-2026-54888 is an uncontrolled recursion vulnerability in the leandrocp mdex library that allows denial of service via deeply nested Markdown input. The vulnerability arises from two mutually recursive Rust functions converting between Elixir and Comrak AST representations without enforcing a maximum recursion depth. An attacker can supply a Markdown document with thousands of nested block quotes, causing a stack overflow in the native code. This overflow triggers an uncatchable SIGSEGV inside a NIF, terminating the entire BEAM process and all running Elixir and Erlang processes on the node. No authentication or special privileges are required to exploit this issue. The vulnerability affects mdex versions from 0.3.0 before 0.12.3 and mdex_native from 0.1.0 before 0.2.3.

jq versions prior to 1.8.2 contain a vulnerability where comparing deeply nested arrays with the == operator causes uncontrolled recursion, leading to stack exhaustion and denial of service. This occurs in jq's recursive structural comparison functions. The issue is fixed in version 1.8.2.

CVE-2026-54297 is a high-severity vulnerability in the lostisland Faraday HTTP client library. The default nested query parameter encoder/decoder in Faraday versions prior to 1.10.6 and 2.14.3 does not enforce a maximum nesting depth when decoding nested query strings. This allows an attacker to craft deeply nested query strings that cause Faraday to build deeply nested Ruby Hash structures. The recursive processing of these structures can trigger a SystemStackError, crashing the thread or worker and resulting in denial of service. The issue is fixed in versions 1.10.6 and 2.14.3.