Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2020-10675

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Mar 19, 2020 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2020-10675
CWEhttps://cwe.mitre.org/data/definitions/835.html

The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via a Delete call.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

NameVendorStart VersionEnd Version
JsonparserJsonparser_project*1.0.0 (excluding)
Red Hat Advanced Cluster Management for Kubernetes 2RedHatacmesolver-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatacm-must-gather-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatacm-operator-bundle-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatapplication-ui-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatcainjector-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatcert-manager-controller-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatcert-manager-webhook-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatcert-policy-controller-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatclusterlifecycle-state-metrics-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatconfigmap-watcher-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatconfig-policy-controller-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatconsole-api-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatconsole-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatconsole-header-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatconsole-ui-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatendpoint-component-operator-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatendpoint-monitoring-operator-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatendpoint-operator-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatgovernance-policy-propagator-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatgovernance-policy-spec-sync-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatgovernance-policy-status-sync-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatgovernance-policy-template-sync-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatgrafana-dashboard-loader-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatgrc-ui-api-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatgrc-ui-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatiam-policy-controller-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatklusterlet-addon-lease-controller-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatklusterlet-operator-bundle-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatkui-web-terminal-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatmanagement-ingress-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatmcm-topology-api-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatmcm-topology-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatmemcached-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatmemcached-exporter-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatmetrics-collector-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatmulticloud-manager-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatmulticlusterhub-operator-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatmulticlusterhub-repo-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatmulticluster-observability-operator-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatmulticluster-operators-application-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatmulticluster-operators-channel-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatmulticluster-operators-deployable-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatmulticluster-operators-placementrule-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatmulticluster-operators-subscription-operator-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatmulticluster-operators-subscription-release-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatobservatorium-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatobservatorium-operator-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatopenshift-hive-operator-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatrbac-query-proxy-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatrcm-controller-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatredisgraph-tls-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatregistration-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatregistration-operator-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatsearch-aggregator-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatsearch-api-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatsearch-collector-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatsearch-operator-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatsearch-ui-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatsubmariner-addon-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatthanos-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatthanos-receive-controller-container*
Red Hat Advanced Cluster Management for Kubernetes 2RedHatwork-container*
Golang-github-buger-jsonparserUbuntubionic*
Golang-github-buger-jsonparserUbuntueoan*
Golang-github-buger-jsonparserUbuntuesm-apps/bionic*
Golang-github-buger-jsonparserUbuntuesm-apps/focal*
Golang-github-buger-jsonparserUbuntufocal*
Golang-github-buger-jsonparserUbuntutrusty*

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use