CWE-617: Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
Also known as assertion failure.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- varnish-cache varnish-modules, fedoraproject fedora, varnish-cache varnish-modules klarlack +2 moreVarnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service ...4.0 Medium
- torproject tor, fedoraproject fedora +1 moreTor before 0.4.5.7 allows a remote attacker to cause Tor directory authorities to exit with an...5.3 Medium
- facebook mvfst, proxygen +1 moreA packet of death scenario is possible in mvfst via a specially crafted message during a QUIC...7.5 High
- red hat libnbd, redhat enterprise linux +1 moreA flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may...2.7 Low
- privoxy, debian linux +1 moreA flaw was found in privoxy before 3.0.32. An assertion failure could be triggered with a crafted...7.5 High
- mozilla firefoxContext-specific code was included in a shared jump table; resulting in assertions being...6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +530 more +532 moreArithmetic overflow can happen while processing NOA IE due to improper error handling in...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar7420 firmware +410 more +412 moreDenial of service while processing fine timing measurement request (FTMR) frame with reserved...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +375 more +377 morePossible denial of service while handling host WMI command due to improper validation in...7.5 High
- openldap, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur...7.5 High
- privoxyA flaw was found in Privoxy in versions before 3.0.31. An assertion failure triggered by a...7.5 High
- gnu glibc, debian linux, fujitsu m10-1 firmware +11 more +13 moreThe iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing...7.5 High
- openldap, apple mac os x, macos +4 more +6 moreA flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the...7.5 High
- openldap, apache bookkeeper, apple mac os x +5 more +7 moreA flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X...7.5 High
- gnu glibc, fedoraproject fedora, netapp e-series santricity os controller +3 more +5 moreThe iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4...4.8 Medium
- qemu, debian linux +1 moreA reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur...3.2 Low
- openldap, debian linux, fedoraproject fedora +7 more +9 moreA flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a...7.5 High
- openldap, apple mac os x, macos +5 more +7 moreA flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be...7.5 High
- qemu, debian linux +1 moreeth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure...6.5 Medium
- fastd project fastd, debian linux, fedoraproject fedora +2 morereceive.c in fastd before v21 allows denial of service (assertion failure) when receiving packets...7.5 High
- juniper junos os evolvedJunos OS Evolved: Receipt of a specifically malformed NDP packet could lead to Denial of Service6.5 Medium
- google tensorflowDenial of Service in Tensorflow6.3 Medium
- google tensorflow, opensuse leap +1 moreDenial of Service in Tensorflow5.3 Medium
- atftp project atftp, debian linux, opensuse leap +2 moreAn exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8098 firmware, kamorta firmware +25 more +27 moreu'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon...7.5 High
- espressif esp-idfThe Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through 4.2 ...6.5 Medium
- mozilla firefox, firefox esr, firefox for android +2 more +4 moreMozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these...8.8 High
- isc bind, canonical ubuntu linux, debian linux +5 more +7 moreA flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c7.5 High
- isc bind, canonical ubuntu linux, debian linux +6 more +8 moreA truncated TSIG response can lead to an assertion failure6.5 Medium
- isc bind, canonical ubuntu linux, isc bind9 +3 more +5 moreAttempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c7.5 High
- isc bind, canonical ubuntu linux, isc bind9 +2 more +4 moreIn BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with...7.5 High
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreIn QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This...3.8 Low
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDue to confusion about ValueTags on JavaScript Objects, an object may pass through the type...8.8 High
- canonical ubuntu linux, isc bind, bind9 +2 more +4 moreA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer4.9 Medium
- qemu, canonical ubuntu linux, opensuse leap +2 more +4 moreAn assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions...5.0 Medium
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, ipq8074 firmware +21 more +23 moreFirmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8009 firmware, apq8053 firmware +23 more +25 moreValid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on...9.8 Critical
- vmware esxi, fusion, workstation +2 moreVMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware...5.5 Medium
- jerryscriptparser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory...7.5 High
- jerryscriptJerryScript 2.2.0 allows attackers to cause a denial of service (assertion failure) because a...7.5 High
- isc bind, canonical ubuntu linux, debian linux +3 more +5 moreA logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +38 more +40 moreActive command timeout since WM status change cmd is not removed from active queue if peer sends...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8096au firmware, mdm9205 firmware +38 more +40 moreError occurs While extracting the ipv6_header having an invalid length due to lack of length...7.5 High
- varnish-cache varnish cache, debian linux, opensuse backports sle +1 more +3 moreAn issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8017 firmware, apq8053 firmware +19 more +21 moreStage-2 fault will occur while writing to an ION system allocation which has been assigned to non...7.8 High
- lldpd project lldpdlldpd before 0.8.0 allows remote attackers to cause a denial of service (assertion failure and...7.5 High
- nothings stb truetype.hstb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.8.8 High
- nothings stb truetype.hstb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.8.8 High
- nothings stb truetype.hstb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.8.8 High
- nothings stb image.hstb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an...6.5 Medium
- Show moreLoading…