CWE-606 — Unchecked Input for Loop Condition
CWE-606: Unchecked Input for Loop Condition
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Base |
| Status | Draft |
| Likelihood of exploit | — |
Description
The product does not properly check inputs that are used for loop conditions, potentially leading to a denial of service or other consequences because of excessive looping.
Common consequences
- Availability: DoS: Resource Consumption (CPU)
Mitigations
Implementation — Do not use user-controlled data for loop conditions.
Implementation — Perform input validation.
References
- CWE page: https://cwe.mitre.org/data/definitions/606.html
- CWE list: https://cwe.mitre.org/data/index.html
See all 1,245 pages under Weakness classes (CWE) →
Related pages
Browse by topic
Every page in the corpus, grouped. Search finds one page; this shows what else is here.