CVE-2017-0886 - AskarLabs CVE Database

CVE-2017-0886

Vendor Nextcloud

Product Nextcloud Server

Weakness CWE-674

Published April 5, 2017

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service.

Key dates

02Disclosure timeline

April 5, 2017 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-0886 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/674.html

Related vulnerabilities

04Related CVE

CVE-2025-6710 Pre-authentication Denial of Service Stack Overflow Vulnerability in JSON Parsing via Excessive Recursion in MongoDB CVE-2026-45740 protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion CVE-2021-30470 CVE-2026-40612 jq: Stack overflow via unbounded recursion in jv_contains CVE-2026-9358 postcss-selector-parser AST Serialization container.js toString recursion