CWE-606: Unchecked Input for Loop Condition
Description
The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.
- Abstraction
- BaseA weakness specific enough to point to detection and prevention methods.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Draft
Common consequences
- Availability
DoS: Resource Consumption (CPU)
Potential mitigations
- Implementation
Do not use user-controlled data for loop conditions.
- Implementation
Perform input validation.
Related weaknesses
Parent weaknesses
Can lead to
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.