CWE-617: Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
Also known as assertion failure.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreMetadata name collision on $-prefixed fields causes post-auth server crash7.1 High
- mongodb server, mongodb, mongodb, inc. mongodb server +2 moreUsing MaxKey() may crash the server7.1 High
- mongodb server, mongodb, mongodb, inc. mongodb server +2 more$_internalConvertBucketIndexStats may crash the mongod server when working on no timeseries input7.1 High
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreCrafted cross-shard merge aggregation crashes MongoDB Server7.1 High
- mongodb server, mongodb, mongodb, inc. mongodb server +2 moreServer crashes in case of the use of exchange7.1 High
- linux, linux kernel +1 morenet: txgbe: fix RTNL assertion warning when remove module5.5 Medium
- sgl-project sglangSGLang Inference HTTP Endpoint lora_manager.py assertion6.3 Medium
- mosaic5g flexricFlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism. The...7.5 High
- mosaic5g flexricFlexRIC v2.0.0 contains a reachable assertion in e2ap_create_pdu() triggered when ASN.1 PER...7.5 High
- mosaic5g flexricFlexRIC v2.0.0 contains a reachable assertion in e2ap_recv_sctp_msg() (src/lib/ep/e2ap_ep.c). The...7.5 High
- No product listedFlexRIC v2.0.0 contains reachable assert(0) calls in stub message handlers for whitelisted but...7.5 High
- No product listedFlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST with an empty...7.5 High
- No product listedFlexRIC v2.0.0 crashes when receiving a duplicate E2_SETUP_REQUEST from the same or spoofed E2...7.5 High
- No product listedFlexRIC v2.0.0 contains a reachable assertion in the iApp message dispatcher. The dispatcher...7.5 High
- No product listedFlexRIC v2.0.0 uses hardcoded assertions to validate Information Element (IE) counts in decoded...7.5 High
- No product listedFlexRIC v2.0.0 crashes when receiving a RIC_SUBSCRIPTION_RESPONSE with an unknown ric_id that has...7.5 High
- No product listedFlexRIC v2.0.0 crashes when an SCTP association is closed before an E2_SETUP_REQUEST is sent. The...7.5 High
- linux, linux kernel +1 moredrm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +5 more +7 moreRDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()7.8 High
- No product listedTeamSpeak 3 Server clientek Handshake assertion6.9 Medium
- linux, linux kernel +1 morenet/smc: avoid early lgr access in smc_clc_wait_msg7.5 High
- linux, linux kernel +1 morenet: remove WARN_ON_ONCE when accessing forward path array5.5 Medium
- ibm http serverIBM HTTP Server is affected by multiple vulnerabilities6.2 Medium
- gnu libredwgGNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertion4.8 Medium
- puttyPuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.3.7 Low
- nimiq core-rs-albatrossnimiq-blockchain: Genesis batch set request5.3 Medium
- nimiq core-rs-albatrossnimiq-keys: Denial of service in Ed25519 multisig delinearization via invalid curve points4.3 Medium
- isc bind, bind 9, red hat enterprise linux 10 +9 more +11 moreInvalid handling of CLASS != IN7.5 High
- mongodb, mongodb, inc. mongodb server +1 moreCalling createIndex with certain index types can crash mongod7.1 High
- webassembly binaryenWebAssembly Binaryen BrOn wasm-ir-builder.cpp makeBrOn assertion4.8 Medium
- free5gcfree5GC: SMF UPI POST /upi/v1/upNodesLinks exits the SMF process on overlapping UE pools (unauthenticated, reachable Fatalf)7.5 High
- free5gcfree5GC: NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-controlled notifyUri)7.5 High
- linux, linux kernel +1 moreice: ptp: don't WARN when controlling PF is unavailable5.5 Medium
- linux, linux kernel +1 moreperf/x86/intel/uncore: Fix die ID init and look up bugs5.5 Medium
- linux, linux kernel +1 morehfs: Replace BUG_ON with error handling for CNID count checks5.5 Medium
- mediatek mt2735 firmware, mt2737 firmware, mt6833 firmware +49 more +51 moreIn Modem, there is a possible system crash due to incorrect error handling. This could lead to...6.5 Medium
- linux, linux kernel +1 morebtrfs: reject root items with drop_progress and zero drop_level5.5 Medium
- linux, linux kernel +1 morecrypto: tegra - Add missing CRYPTO_ALG_ASYNC8.8 High
- No product listedAssertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF ...7.5 High
- xenXenstored DoS via XS_RESET_WATCHES command6.5 Medium
- linux, linux kernel +1 morePM: sleep: Drop spurious WARN_ON() from pm_restore_gfp_mask()5.5 Medium
- kyvernoKyverno Controller Denial of Service via forEach Mutation Panic7.7 High
- openvpnImproper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through...6.9 Medium
- nimiq network-libp2p, proof-of-stake +1 morenetwork-libp2p: Peer can crash the node by opening discovery protocol substream twice7.5 High
- nimiq nimiq-blockchain, proof-of-stake +1 morenimiq-blockchain: Peer-triggerable panic during history sync5.3 Medium
- nimiq nimiq-transaction, proof-of-stake +1 morenimiq-transaction vulnerable to panic via `HistoryTreeProof` length mismatch3.1 Low
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreext4: replace BUG_ON with proper error handling in ext4_read_inline_folio5.5 Medium
- zcashfoundation zebra, zfnd zebra-rpc, zebrad +2 moreZEBRA: Denial of Service via Interrupted JSON-RPC Requests from Authenticated Clients6.9 Medium
- zcashfoundation zebra, zfnd zebra-chain, zebrad +2 moreZEBRA: rk Identity Point Panic in Transaction Verification9.2 Critical
- nimiq core-rs-albatross, proof-of-stake +1 morenimiq-consensus panics via RequestMacroChain micro-block locator5.3 Medium
- Show moreLoading…