CWE-617: Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
Also known as assertion failure.
A kind of CWE-705 Incorrect Control Flow Scoping.
From the CWE List. © The MITRE Corporation.
Newest
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled7.1 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled7.1 High
- juniper networks junos osJunos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is enabled7.1 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configured7.1 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled7.1 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is used7.1 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured7.1 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: An attacker causes an rpd crash when inter-AS MVPN ingress replication is used8.7 High
- juniper networks junos os, junos os evolved +1 moreJunos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabled7.1 High
- nasa fprimeF´: SpacePacketDeframer Small Packet Assertion DoS7.5 High
- juniper networks junos osJunos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used9.2 Critical
- juniper networks junos osJunos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is used7.1 High
- bytecodealliance wasmtimeWasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via call_async Drop5.9 Medium
- bytecodealliance wasmtimeWasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via Func::call5.9 Medium
- bytecodealliance wasmtimeWasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic After Trap5.9 Medium
- bytecodealliance wasmtimeWasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via StreamReader Type Mismatch5.9 Medium
- bytecodealliance wasmtimeWasmtime 49.0.0 before 49.0.3 Host Panic via Overlapping String Transcode in Fused Adapter5.9 Medium
- mongodb server, mongodb, inc. mongodb server +1 moreIncorrect authorization in MongoDB Server router for bulk writes to system namespaces7.1 High
- mongodb server, mongodb, inc. mongodb server +1 moreMissing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of Service7.1 High
- freerdpFreeRDP 3.11.0 before 3.32.0 Reachable Assertion via AVC444 Odd Region Width7.1 High
- freerdpFreeRDP 3.0.0 before 3.32.0 Reachable Assertion via Stale Smartcard Handle7.1 High
- freerdpFreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA7.1 High
- zcashfoundation zebraZebra 6.4.0 before 6.4.2 Denial of Service via Malformed v6 Transaction8.7 High
- gitoxidelabs gix-packGitoxide gix-pack before 0.75.0 Denial of Service via OFS_DELTA Base Distance7.1 High
- gitoxidelabs gix-packgix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header7.1 High
- freerdpFreeRDP 3.11.0 before 3.32.1 Reachable Assertion DoS via urb_isoch_transfer2.3 Low
- zephyrproject zephyrBluetooth LE Controller: retained RX node leak and reachable assertion in the PHY Update procedure6.5 Medium
- zephyrproject zephyrBluetooth LE controller leaks a retained RX node when an unexpected LL Control PDU arrives during a Connection Update6.5 Medium
- riot-os riotRIOT: nanocoap_fileserver ignores response initialization failure, leading to reachable assertion7.5 High
- red lion controls 700 seriesRed Lion Controls N-Tron 700 Series Reachable Assertion8.5 High
- illumos illumos-gate, omnios +1 moreReachable assertion in illumos bhyve REP string instruction emulation allows guest to panic host6.8 Medium
- open5gsOpen5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request8.2 High
- vllmvLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features6.5 Medium
- vllmvLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core6.5 Medium
- qt for mcusAn empty <img> attribute value in styled text triggers a parser error that halts the device.6.6 Medium
- mediatek mt2716 firmware, mt6835 firmware, mt6858 firmware +20 more +22 moreIn Modem, there is a possible system crash due to improper input validation. This could lead to...5.3 Medium
- zcashfoundation zebraZebra before 11.0.0 Denial of Service via getblock Verbosity 26.9 Medium
- pexip infinityPexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation...7.5 High
- pexip infinityPexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in...7.5 High
- pexip infinityPexip Infinity before 40.1 is affected by improper input validation in the signaling...7.5 High
- pexip infinityPexip Infinity before 41.1 is affected by improper input validation in the media implementation...7.5 High
- wiresharkReachable Assertion in Wireshark5.5 Medium
- linux, linux kernel +1 moreext4: fix transaction overflow during writeback5.5 Medium
- linux, linux kernel +1 morebpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic5.5 Medium
- linux, linux kernel +1 moreprintk: Don't WARN on kthread_run failure.5.5 Medium
- aws s2n-quicPotential denial of service when configured to send Retry packets in s2n-quic8.7 High
yaraDebianA reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule...5.5 Medium- vllmvLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure8.7 High
- osmocom osmo-iuhReachable assertion at ranap_handle_co_dt()7.5 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +2 more +4 moreCockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash5.9 Medium
- Show moreLoading…