CWE · MITRE source
CWE-834Excessive Iteration
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.
If the iteration can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory. In many cases, a loop does not need to be infinite in order to cause enough resource consumption to adversely affect the product or its host system; it depends on the amount of resources consumed per iteration.
Last updated: 20 August 2026 13:14 UTC
Control responseHuman-reviewed
Answering this weakness across the control lifecycle, from our framework cross-walks.
Prevent
Stop it (NIST 800-53 / CSF Protect)
Detect
Catch it (CSF Detect / Respond)
—
Harden
Shrink the surface (DISA STIG)
- 2 hardening rules · 2 OS baselines
Validate
Prove the fix (OWASP ASVS)
—
NIST 800-53 r5 controls that address this weakness (0)AI-assisted
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2017-12587 UPD | 6.9 | 8.8 | 0.0203 | 2017-08-06 |
CVE-2021-35515 UPD | 6.8 | 7.5 | 0.1157 | 2021-07-13 |
CVE-2021-39924 UPD | 6.5 | 7.5 | 0.0493 | 2021-11-19 |
CVE-2018-14342 UPD | 6.4 | 7.5 | 0.0370 | 2018-07-19 |
CVE-2020-14303 UPD | 6.4 | 7.5 | 0.0354 | 2020-07-06 |
CVE-2018-7323 UPD | 6.3 | 7.5 | 0.0241 | 2018-02-23 |
CVE-2018-9261 UPD | 6.3 | 7.5 | 0.0289 | 2018-04-04 |
CVE-2018-11813 UPD | 6.3 | 7.5 | 0.0316 | 2018-06-06 |
CVE-2019-3565 UPD | 6.3 | 7.5 | 0.0281 | 2019-05-06 |
CVE-2020-35573 UPD | 6.3 | 7.5 | 0.0266 | 2020-12-20 |
CVE-2021-4190 UPD | 6.3 | 7.5 | 0.0310 | 2021-12-30 |
CVE-2017-11188 UPD | 6.2 | 7.5 | 0.0155 | 2017-07-12 |
CVE-2017-11409 UPD | 6.2 | 7.5 | 0.0226 | 2017-07-18 |
CVE-2018-7321 UPD | 6.2 | 7.5 | 0.0168 | 2018-02-23 |
CVE-2019-3552 UPD | 6.2 | 7.5 | 0.0198 | 2019-05-06 |
CVE-2019-3558 UPD | 6.2 | 7.5 | 0.0202 | 2019-05-06 |
CVE-2019-3559 UPD | 6.2 | 7.5 | 0.0199 | 2019-05-06 |
CVE-2019-3564 UPD | 6.2 | 7.5 | 0.0199 | 2019-05-06 |
CVE-2021-3128 UPD | 6.2 | 7.5 | 0.0218 | 2021-04-12 |
CVE-2021-39204 UPD | 6.2 | 7.5 | 0.0166 | 2021-09-09 |
CVE-2021-3125 UPD | 6.1 | 7.5 | 0.0150 | 2021-04-12 |
CVE-2021-39923 UPD | 6.1 | 7.5 | 0.0153 | 2021-11-19 |
CVE-2021-4021 UPD | 6.1 | 7.5 | 0.0105 | 2022-02-24 |
CVE-2023-26513 UPD | 6.1 | 7.5 | 0.0146 | 2023-03-20 |
CVE-2023-38200 UPD | 6.1 | 7.5 | 0.0144 | 2023-07-24 |