CWE-674—Uncontrolled Recursion
PUBLISHEDweakness record
released 2008-04-11 · last modified 2026-04-30
Metadata
- CWE ID:
- CWE-674
- 摘要:
- Class
- 结构:
- Simple
- 状态:
- Draft
- 发布日期:
- 2008-04-11
- 更新日期:
- 2026-04-30
描述
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
常见后果
- 范围:
- Availability
- 影响:
- DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory)
- 注释:
- Resources including CPU, memory, and stack memory could be rapidly consumed or exhausted, eventually leading to an exit or crash.
- 范围:
- Confidentiality
- 影响:
- Read Application Data
- 注释:
- In some cases, an application's interpreter might kill a process or thread that appears to be consuming too much resources, such as with PHP's memory_limit setting. When the interpreter kills the process/thread, it might report an error containing detailed information such as the application's installation path.