CWE-617: Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
Also known as assertion failure.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- polipo, debian linux +1 morePolipo before 1.0.4.1 suffers from a DoD vulnerability via specially-crafted HTTP POST / PUT...7.5 High
- quagga, debian linux, redhat enterprise linux +2 morequagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal6.5 Medium
- linux acrnThe Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci...7.5 High
- isc bind, bind9 +1 moreAn oversight while backporting a feature leads to an assertion failure in buffer.c:4205.9 Medium
- isc bind, bind 9 +1 moreAn error in QNAME minimization code can cause BIND to exit with an assertion failure5.9 Medium
- isc bind, bind 9 supported preview edition +1 moreBIND Supported Preview Edition can exit with an assertion failure if ECS is in use5.9 Medium
- streebog project streebogIncorrect implementation in streebog7.5 High
- streebog project streebogIncorrect implementation of the Streebog hash functions in streebog7.5 High
- google android, opensuse leap +1 moreIn the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON...2.3 Low
- varnish-software varnish cache, varnish cache project cache, debian linux +2 moreAn issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An...7.5 High
- webassembly binaryenAn issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can...6.5 Medium
- suricata-ids suricataAn issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the...7.5 High
- ics keaA packet containing a malformed DUID can cause the kea-dhcp6 server to terminate6.5 Medium
- isc keaA packet containing a malformed DUID can cause the kea-dhcp6 server to terminate6.5 Medium
- stb vorbis project vorbis, debian linux +1 moreA reachable assertion in the lookup1_values function in stb_vorbis through 2019-03-04 allows an...5.5 Medium
- virustotal yaraAn exploitable denial of service vulnerability exists in the object lookup functionality of Yara...6.5 Medium
- openmpt libopenmptDSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.6.5 Medium
- openmpt libopenmpt, opensuse leap +1 moreJ2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.6.5 Medium
- jsish jsi, jsish +1 moreJsish 2.4.84 2.0484 is affected by: Reachable Assertion. The impact is: denial of service. The...7.5 High
- exiv2, canonical ubuntu linux, fedoraproject fedora +2 moreExiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion...6.5 Medium
- isc bind, bind 9, f5 big-ip access policy manager +15 more +17 moreA race condition when discarding malformed packets can cause BIND to exit with an assertion failure5.9 Medium
- libreswanIn Libreswan before 3.28, an assertion failure can lead to a pluto IKE daemon restart. An...7.5 High
- isc bind, bind 9 supported preview edition +1 moreBIND Supported Preview Edition can exit with an assertion failure if nxdomain-redirect is used5.3 Medium
- isc bind, bind 9 +1 moreAn error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion failure in query.c5.9 Medium
- isc bind, redhat enterprise linux server aus, enterprise linux server eus +1 more +3 moreA denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker...7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreA vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could...9.8 Critical
- gnu pspp, fedoraproject fedora, suse backports +2 moreThere is a reachable assertion abort in the function write_long_string_missing_values() in data...6.5 Medium
- axiosys bento4An issue was discovered in Bento4 v1.5.1-627. There is an assertion failure in AP4_AtomListWriter...6.5 Medium
- webassembly binaryenAn assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in...6.5 Medium
- isc bind, bind 9, netapp cloud backup +1 more +3 moreBIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.5.9 Medium
- isc bind, netapp cloud backup, data ontap edge +2 moreAn error in zone database reference counting can lead to an assertion failure if a server which...5.3 Medium
- isc bind, bind 9, netapp data ontap edge +1 more +3 moreA malformed request can trigger an assertion failure in badcache.c7.5 High
- cairographics cairoAn issue was discovered in cairo 1.16.0. There is an assertion problem in the function...6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: A flowspec BGP update with a specific term-order causes routing protocol daemon (rpd) process to crash with a core.7.5 High
- mit kerberos, debian linux +1 moreA Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17....5.3 Medium
- xenAn issue was discovered in Xen 4.11 allowing HVM guest OS users to cause a denial of service ...7.8 High
- jasper project jasper, debian linux, opensuse leap +2 more +4 moreAn issue was discovered in JasPer 2.0.14. There is an access violation in the function...6.5 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that...7.5 High
- telegram desktop** DISPUTED ** Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of...7.5 High
- canonical ubuntu linux, openvswitch, redhat openstack +2 moreAn issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting...7.5 High
- canonical ubuntu linux, debian linux, openvswitch +1 more +3 moreAn issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting...4.3 Medium
- surina soundtouchThe BPMDetect class in BPMDetect.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows...6.5 Medium
- ffmpeg, canonical ubuntu linux, debian linux +2 moreThe flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an...7.5 High
- isc bind, bind 9, canonical ubuntu linux +9 more +11 moreA flaw in the "deny-answer-aliases" feature can cause an assertion failure in named7.5 High
- qemu, redhat openstack, virtualization +2 moreAn assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD)...5.3 Medium
- surina soundtouchThe FIRFilter::evaluateFilterMulti function in FIRFilter.cpp in libSoundTouch.a in Olli...7.5 High
- surina soundtouchThe RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli...7.5 High
- ffmpegIn libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context...6.5 Medium
- tinyexr project tinyexrtinyexr 0.9.5 has an assertion failure in DecodePixelData in tinyexr.h.7.5 High
- Show moreLoading…