CWE-617 · Reachable Assertion (page 4)
Page 4 of 9 — CVEs classified under CWE-617, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-1440 | Medium | 6.8 | 2024-11-18 | A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XR Software could allow an unauthenticated, re… |
CVE-2024-23385 | High | 7.5 | 2024-11-04 | Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE. |
CVE-2024-10455 | High | 7.5 | 2024-10-28 | Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block |
CVE-2024-50615 | Medium | 6.5 | 2024-10-27 | TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef. |
CVE-2024-50614 | Medium | 6.5 | 2024-10-27 | TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XMLUtil::GetCharacterRef. |
CVE-2024-50613 | Medium | 6.5 | 2024-10-27 | libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close. |
CVE-2024-49932 | High | 7.0 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't readahead the relocation inode on RST On relocation we're doing readahead on… |
CVE-2024-47522 | High | 7.5 | 2024-10-16 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, invalid ALPN in T… |
CVE-2024-45795 | High | 7.5 | 2024-10-16 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, rules using datas… |
CVE-2024-45403 | Low | 3.7 | 2024-10-11 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. When h2o is configured as a reverse proxy and HTTP/3 requests are cancelled by the client… |
CVE-2024-45396 | High | 7.5 | 2024-10-11 | Quicly is an IETF QUIC protocol implementation. Quicly up to commtit d720707 is susceptible to a denial-of-service attack. A remote attacker can exploit these… |
CVE-2024-20094 | High | 7.5 | 2024-10-07 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges n… |
CVE-2024-8354 | Medium | 5.5 | 2024-09-19 | A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device… |
CVE-2024-46753 | Medium | 5.5 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: btrfs: handle errors from btrfs_dec_ref() properly In walk_up_proc() we BUG_ON(ret) from… |
CVE-2024-8768 | High | 7.5 | 2024-09-17 | A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, resulting in a denial of service. |
CVE-2024-42252 | Medium | 5.5 | 2024-08-08 | In the Linux kernel, the following vulnerability has been resolved: closures: Change BUG_ON() to WARN_ON() If a BUG_ON() can be hit in the wild, it shouldn't… |
CVE-2024-42251 | Medium | 5.5 | 2024-08-08 | In the Linux kernel, the following vulnerability has been resolved: mm: page_ref: remove folio_try_get_rcu() The below bug was reported on a non-SMP kernel: … |
CVE-2024-23350 | Medium | 6.5 | 2024-08-05 | Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is… |
CVE-2024-39949 | High | 7.5 | 2024-07-31 | A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device t… |
CVE-2023-52887 | High | 7.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_s… |
CVE-2024-41043 | Medium | 5.5 | 2024-07-29 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: drop bogus WARN_ON Happens when rules get flushed/deleted whi… |
CVE-2024-4076 | High | 7.5 | 2024-07-23 | Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This issue af… |
CVE-2024-39509 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: HID: core: remove unnecessary WARN_ON() in implement() Syzkaller hit a warning [1] in a c… |
CVE-2024-39500 | High | 7.8 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: sock_map: avoid race between sock_map_close and sk_psock_put sk_psock_get will return NUL… |
CVE-2024-39497 | Medium | 5.5 | 2024-07-12 | In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) Lack of check for copy-on… |
CVE-2024-39697 | High | 8.6 | 2024-07-09 | phonenumber is a library for parsing, formatting and validating international phone numbers. Since 0.3.4, the phonenumber parsing code may panic due to a panic… |
CVE-2024-38306 | High | 7.8 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: protect folio::private when attaching extent buffer folios [BUG] Since v6.8 there… |
CVE-2023-52831 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Don't offline the last non-isolated CPU If a system has isolated CPUs via th… |
CVE-2021-47351 | High | 7.8 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix races between xattr_{set|get} and listxattr operations UBIFS may occur some pr… |
CVE-2021-47315 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: memory: fsl_ifc: fix leak of IO mapping on probe failure On probe error the driver should… |
CVE-2021-47305 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: dma-buf/sync_file: Don't leak fences on merge failure Each add_fence() call does a dma_fe… |
CVE-2024-36000 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix missing hugetlb_lock for resv uncharge There is a recent report on UFFDIO… |
CVE-2024-35957 | Medium | 5.5 | 2024-05-20 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix WARN_ON in iommu probe path Commit 1a75cc710b95 ("iommu/vt-d: Use rbtree… |
CVE-2024-35884 | Critical | 9.8 | 2024-05-19 | In the Linux kernel, the following vulnerability has been resolved: udp: do not accept non-tunnel GSO skbs landing in a tunnel When rx-udp-gro-forwarding is… |
CVE-2024-3374 | Medium | 5.3 | 2024-05-14 | An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exce… |
CVE-2024-33263 | Medium | 4.0 | 2024-05-14 | QuickJS commit 3b45d15 was discovered to contain an Assertion Failure via JS_FreeRuntime(JSRuntime *) at quickjs.c. |
CVE-2024-33601 | High | 7.3 | 2024-05-06 | nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and thes… |
CVE-2023-43529 | High | 7.5 | 2024-05-06 | Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received. |
CVE-2024-34475 | High | 7.5 | 2024-05-05 | Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmm_state_authentication in amf/gmm-sm.c fo… |
CVE-2024-26946 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address Read from an unsa… |
CVE-2024-26937 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Reset queue_priority_hint on parking Originally, with strict in order execut… |
CVE-2022-48633 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix WARN_ON(lock->magic != lock) error psb_gem_unpin() calls dma_resv_lock()… |
CVE-2024-33255 | Medium | 6.2 | 2024-04-26 | Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p) in ecma_free_string_list. |
CVE-2024-31744 | High | 7.5 | 2024-04-19 | In Jasper 4.2.2, the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an assertion failure vulnerability, allowing attackers to cause a d… |
CVE-2024-32475 | High | 7.5 | 2024-04-18 | Envoy is a cloud-native, open source edge and service proxy. When an upstream TLS cluster is used with `auto_sni` enabled, a request containing a `host`/`:auth… |
CVE-2024-3567 | Medium | 5.5 | 2024-04-10 | A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in hw/net/net_tx_pkt.c when trying to calculate the checksum… |
CVE-2024-26727 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not ASSERT() if the newly created subvolume already got read [BUG] There is a s… |
CVE-2024-26726 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't drop extent_map for free space inode on write error While running the CI for… |
CVE-2023-52621 | High | 7.8 | 2024-03-26 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers These three bpf_map_… |
CVE-2023-33096 | High | 7.5 | 2024-03-04 | Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16. |
CVE-2023-33095 | High | 7.5 | 2024-03-04 | Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR. |
CVE-2023-52569 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: btrfs: remove BUG() after failure to insert delayed dir index item Instead of calling BUG… |
CVE-2023-5679 | High | 7.5 | 2024-02-13 | A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features a… |
CVE-2023-5517 | High | 7.5 | 2024-02-13 | A flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when: - `nxdomain-redirect <domain>;` is configured, and - t… |
CVE-2024-25445 | High | 7.8 | 2024-02-09 | Improper handling of values in HuginBase::PTools::Transform::transform of Hugin 2022.0.0 leads to an assertion failure. |
CVE-2023-43523 | High | 7.5 | 2024-02-06 | Transient DOS while processing 11AZ RTT management action frame received through OTA. |
CVE-2024-23850 | Medium | 5.5 | 2024-01-23 | In btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion failure and crash because a subvolume can be read out… |
CVE-2023-34194 | High | 7.5 | 2023-12-13 | StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted XML documen… |
CVE-2023-33044 | High | 7.5 | 2023-12-05 | Transient DOS in Data modem while handling TLB control messages from the Network. |
CVE-2023-33043 | High | 7.5 | 2023-12-05 | Transient DOS in Modem when a Beam switch request is made with a non-configured BWP. |
CVE-2023-33041 | High | 7.5 | 2023-12-05 | Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids. |
CVE-2023-49286 | High | 8.6 | 2023-12-04 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Den… |
CVE-2023-40462 | High | 7.5 | 2023-12-04 | The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which could potentially result in a Denial… |
CVE-2023-32846 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32845 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32844 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32843 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32842 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32841 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-5871 | Medium | 5.3 | 2023-11-27 | A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network. This issue… |
CVE-2023-38473 | Medium | 6.2 | 2023-11-02 | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function. |
CVE-2023-38472 | Medium | 6.2 | 2023-11-02 | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function. |
CVE-2023-38471 | Medium | 6.2 | 2023-11-02 | A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function. |
CVE-2023-38470 | Medium | 6.2 | 2023-11-02 | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function. |
CVE-2023-38469 | Medium | 6.2 | 2023-11-02 | A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record. |
CVE-2023-44175 | Medium | 6.5 | 2023-10-12 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows to send specific genuine PIM… |
CVE-2023-44386 | Medium | 5.3 | 2023-10-05 | Vapor is an HTTP web framework for Swift. There is a denial of service vulnerability impacting all users of affected versions of Vapor. The HTTP1 error handler… |
CVE-2023-24843 | High | 7.5 | 2023-10-03 | Transient DOS in Modem while triggering a camping on an 5G cell. |
CVE-2023-32820 | High | 7.5 | 2023-10-02 | In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional executi… |
CVE-2023-4236 | High | 7.5 | 2023-09-20 | A flaw in the networking code handling DNS-over-TLS queries may cause `named` to terminate unexpectedly due to an assertion failure. This happens when internal… |
CVE-2023-3301 | Medium | 5.6 | 2023-09-13 | A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has… |
CVE-2023-21653 | High | 7.5 | 2023-09-05 | Transient DOS in Modem while processing RRC reconfiguration message. |
CVE-2023-21646 | High | 7.5 | 2023-09-05 | Transient DOS in Modem while processing invalid System Information Block 1. |
CVE-2022-38349 | Medium | 6.5 | 2023-08-22 | An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to denial of service because PDFDoc::replacePageDict in PDFDo… |
CVE-2022-37052 | Medium | 6.5 | 2023-08-22 | A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject. |
CVE-2022-37051 | Medium | 6.5 | 2023-08-22 | An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream… |
CVE-2022-35205 | Medium | 5.5 | 2023-08-22 | An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial of service. |
CVE-2021-46179 | Medium | 6.5 | 2023-08-22 | Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx function. |
CVE-2023-38976 | High | 7.5 | 2023-08-21 | An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function. |
CVE-2023-39949 | High | 7.5 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.9.1 and 2.6.5, improper… |
CVE-2023-39534 | High | 7.5 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0, 2.9.2, and 2.6.5… |
CVE-2021-31294 | Medium | 5.9 | 2023-07-15 | Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command)… |
CVE-2023-36840 | Medium | 5.5 | 2023-07-14 | A Reachable Assertion vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a locally-based, low-privileged a… |
CVE-2023-37836 | Medium | 6.5 | 2023-07-13 | libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp. This vulnerability allows attackers to cau… |
CVE-2023-34868 | High | 7.5 | 2023-06-14 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the parser_parse_for_statement_start at jerry-core/parser/js/js-parser-stat… |
CVE-2023-34867 | High | 7.5 | 2023-06-14 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_property_hashmap_create at jerry-core/ecma/base/ecma-property-hash… |
CVE-2023-1428 | High | 7.5 | 2023-06-09 | There exists an vulnerability causing an abort() to be called in gRPC. The following headers cause gRPC's C++ implementation to abort() when called via http2… |
CVE-2022-40538 | High | 7.5 | 2023-06-06 | Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network. |
CVE-2022-33251 | High | 7.5 | 2023-06-06 | Transient DOS due to reachable assertion in Modem because of invalid network configuration. |
CVE-2022-22060 | High | 7.5 | 2023-06-06 | Assertion occurs while processing Reconfiguration message due to improper validation |