CWE-617: Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
Also known as assertion failure.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- openvpnOpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet...6.5 Medium
- underbit mad libmadThe mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted,...4.7 Medium
- isc bind, bind 9, debian linux +3 more +5 morenamed exits with a REQUIRE assertion failure if it receives a null command string on its control channel6.5 Medium
- isc bind, bind 9, debian linux +9 more +11 moreA response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME7.5 High
- isc bind, bind 9, debian linux +9 more +11 moreAn error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"5.9 Medium
- libaacplus project libaacplusaacplusenc.c in HE-AAC+ Codec (aka libaacplus) 2.0.2 has an assertion failure, which might allow...7.8 High
- jasper project jasper, fedoraproject fedora, opensuse leap +2 moreThe calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a...7.5 High
- jasper project jasper, fedoraproject fedora +1 moreThe jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a...7.5 High
- jasper project jasper, canonical ubuntu linux +1 moreThe ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause...5.5 Medium
- gdraheim zziplibseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion...5.5 Medium
- linux kernelRace condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel...5.5 Medium
- jasper project jasper, fedoraproject fedora, opensuse leap +3 more +5 moreThe jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to...7.5 High
- isc bind, debian linux, netapp data ontap edge +8 more +10 morenamed in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1...7.5 High
- qemu, debian linux +1 moreQEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is...5.5 Medium
- isc bind, apple os x server, canonical ubuntu linux +18 more +20 morenamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to...7.8 High
- google chromeGoogle Chrome before 6.0.472.59 on Linux does not properly handle cursors, which might allow...5.0 Medium
- time-travellers oftpdoftpd before 0.3.7 allows remote attackers to cause a denial of service (daemon abort) via a (1)...7.5 High
- kde ksirc, canonical ubuntu linux +1 moreKsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG...6.5 Medium
- openldap, canonical ubuntu linux +1 moreOpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via...7.5 High
- wiresharkOff-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through...7.5 High
- isc bind, apple mac os x, mac os x server +1 more +3 moreBIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of...7.5 High