CWE-617 · Reachable Assertion (page 5)
Page 5 of 9 — CVEs classified under CWE-617, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-52621 | High | 7.8 | 2024-03-26 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers These three bpf_map_… |
CVE-2023-33096 | High | 7.5 | 2024-03-04 | Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16. |
CVE-2023-33095 | High | 7.5 | 2024-03-04 | Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR. |
CVE-2023-52569 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: btrfs: remove BUG() after failure to insert delayed dir index item Instead of calling BUG… |
CVE-2023-5679 | High | 7.5 | 2024-02-13 | A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features a… |
CVE-2023-5517 | High | 7.5 | 2024-02-13 | A flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when: - `nxdomain-redirect <domain>;` is configured, and - t… |
CVE-2024-25445 | High | 7.8 | 2024-02-09 | Improper handling of values in HuginBase::PTools::Transform::transform of Hugin 2022.0.0 leads to an assertion failure. |
CVE-2023-43523 | High | 7.5 | 2024-02-06 | Transient DOS while processing 11AZ RTT management action frame received through OTA. |
CVE-2024-23850 | Medium | 5.5 | 2024-01-23 | In btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion failure and crash because a subvolume can be read out… |
CVE-2023-34194 | High | 7.5 | 2023-12-13 | StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted XML documen… |
CVE-2023-33044 | High | 7.5 | 2023-12-05 | Transient DOS in Data modem while handling TLB control messages from the Network. |
CVE-2023-33043 | High | 7.5 | 2023-12-05 | Transient DOS in Modem when a Beam switch request is made with a non-configured BWP. |
CVE-2023-33041 | High | 7.5 | 2023-12-05 | Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids. |
CVE-2023-49286 | High | 8.6 | 2023-12-04 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Den… |
CVE-2023-40462 | High | 7.5 | 2023-12-04 | The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which could potentially result in a Denial… |
CVE-2023-32846 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32845 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32844 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32843 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32842 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-32841 | High | 7.5 | 2023-12-04 | In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages… |
CVE-2023-5871 | Medium | 5.3 | 2023-11-27 | A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network. This issue… |
CVE-2023-38473 | Medium | 6.2 | 2023-11-02 | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function. |
CVE-2023-38472 | Medium | 6.2 | 2023-11-02 | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function. |
CVE-2023-38471 | Medium | 6.2 | 2023-11-02 | A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function. |
CVE-2023-38470 | Medium | 6.2 | 2023-11-02 | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function. |
CVE-2023-38469 | Medium | 6.2 | 2023-11-02 | A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record. |
CVE-2023-44175 | Medium | 6.5 | 2023-10-12 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows to send specific genuine PIM… |
CVE-2023-44386 | Medium | 5.3 | 2023-10-05 | Vapor is an HTTP web framework for Swift. There is a denial of service vulnerability impacting all users of affected versions of Vapor. The HTTP1 error handler… |
CVE-2023-24843 | High | 7.5 | 2023-10-03 | Transient DOS in Modem while triggering a camping on an 5G cell. |
CVE-2023-32820 | High | 7.5 | 2023-10-02 | In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional executi… |
CVE-2023-4236 | High | 7.5 | 2023-09-20 | A flaw in the networking code handling DNS-over-TLS queries may cause `named` to terminate unexpectedly due to an assertion failure. This happens when internal… |
CVE-2023-3301 | Medium | 5.6 | 2023-09-13 | A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has… |
CVE-2023-21653 | High | 7.5 | 2023-09-05 | Transient DOS in Modem while processing RRC reconfiguration message. |
CVE-2023-21646 | High | 7.5 | 2023-09-05 | Transient DOS in Modem while processing invalid System Information Block 1. |
CVE-2022-38349 | Medium | 6.5 | 2023-08-22 | An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to denial of service because PDFDoc::replacePageDict in PDFDo… |
CVE-2022-37052 | Medium | 6.5 | 2023-08-22 | A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject. |
CVE-2022-37051 | Medium | 6.5 | 2023-08-22 | An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream… |
CVE-2022-35205 | Medium | 5.5 | 2023-08-22 | An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial of service. |
CVE-2021-46179 | Medium | 6.5 | 2023-08-22 | Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx function. |
CVE-2023-38976 | High | 7.5 | 2023-08-21 | An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function. |
CVE-2023-39949 | High | 7.5 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.9.1 and 2.6.5, improper… |
CVE-2023-39534 | High | 7.5 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0, 2.9.2, and 2.6.5… |
CVE-2021-31294 | Medium | 5.9 | 2023-07-15 | Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command)… |
CVE-2023-36840 | Medium | 5.5 | 2023-07-14 | A Reachable Assertion vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a locally-based, low-privileged a… |
CVE-2023-37836 | Medium | 6.5 | 2023-07-13 | libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp. This vulnerability allows attackers to cau… |
CVE-2023-34868 | High | 7.5 | 2023-06-14 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the parser_parse_for_statement_start at jerry-core/parser/js/js-parser-stat… |
CVE-2023-34867 | High | 7.5 | 2023-06-14 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_property_hashmap_create at jerry-core/ecma/base/ecma-property-hash… |
CVE-2023-1428 | High | 7.5 | 2023-06-09 | There exists an vulnerability causing an abort() to be called in gRPC. The following headers cause gRPC's C++ implementation to abort() when called via http2… |
CVE-2022-40538 | High | 7.5 | 2023-06-06 | Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network. |
CVE-2022-33251 | High | 7.5 | 2023-06-06 | Transient DOS due to reachable assertion in Modem because of invalid network configuration. |
CVE-2022-22060 | High | 7.5 | 2023-06-06 | Assertion occurs while processing Reconfiguration message due to improper validation |
CVE-2023-33199 | Medium | 5.3 | 2023-05-26 | Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. A malformed proposed entry of… |
CVE-2023-23759 | High | 7.5 | 2023-05-18 | There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely. This behavior requires the client support… |
CVE-2023-31921 | Medium | 5.5 | 2023-05-12 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_big_uint_div_mod at jerry-core/ecma/operations/ecma-big-uint.c. |
CVE-2023-31920 | Medium | 5.5 | 2023-05-12 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the vm_loop at jerry-core/vm/vm.c. |
CVE-2023-31919 | Medium | 5.5 | 2023-05-12 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the jcontext_raise_exception at jerry-core/jcontext/jcontext.c. |
CVE-2023-31918 | Medium | 5.5 | 2023-05-12 | Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the parser_parse_function_arguments at jerry-core/parser/js/js-parser.c. |
CVE-2023-31916 | Medium | 5.5 | 2023-05-12 | Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the jmem_heap_finalize at jerry-core/jmem/jmem-heap.c. |
CVE-2023-31913 | Medium | 5.5 | 2023-05-12 | Jerryscript 3.0 *commit 1a2c047) was discovered to contain an Assertion Failure via the component parser_parse_class at jerry-core/parser/js/js-parser-expr.c. |
CVE-2023-2156 | High | 7.5 | 2023-05-09 | A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling o… |
CVE-2023-29935 | Medium | 5.5 | 2023-05-05 | llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced. |
CVE-2022-40504 | High | 7.5 | 2023-05-02 | Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network. |
CVE-2022-40508 | High | 7.5 | 2023-05-02 | Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported. |
CVE-2022-34144 | High | 7.5 | 2023-05-02 | Transient DOS due to reachable assertion in Modem during OSI decode scheduling. |
CVE-2023-28856 | Medium | 5.5 | 2023-04-18 | Redis is an open source, in-memory database that persists on disk. Authenticated users can use the `HINCRBYFLOAT` command to create an invalid hash field that… |
CVE-2022-36440 | High | 7.5 | 2023-04-03 | A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function. Attackers can maliciously construct BGP open packets and s… |
CVE-2023-28425 | Medium | 5.5 | 2023-03-20 | Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to… |
CVE-2023-27789 | High | 7.5 | 2023-03-16 | An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint. |
CVE-2023-27788 | High | 7.5 | 2023-03-16 | An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint. |
CVE-2023-27783 | High | 7.5 | 2023-03-16 | An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt_cleanup function at plugins/dlt_plugin… |
CVE-2022-40527 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM. |
CVE-2022-33272 | High | 7.5 | 2023-03-10 | Transient DOS in modem due to reachable assertion. |
CVE-2022-33254 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in Modem while processing SIB1 Message. |
CVE-2022-33250 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover. |
CVE-2022-33244 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout |
CVE-2022-48363 | High | 7.5 | 2023-02-26 | In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving… |
CVE-2022-3924 | High | 7.5 | 2023-01-26 | This issue can affect BIND 9 resolvers with `stale-answer-enable yes;` that also make use of the option `stale-answer-client-timeout`, configured with a value… |
CVE-2022-3488 | High | 7.5 | 2023-01-26 | Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND… |
CVE-2020-36562 | High | 7.5 | 2022-12-28 | Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector. |
CVE-2022-47516 | High | 7.5 | 2022-12-18 | An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a… |
CVE-2022-25702 | High | 7.5 | 2022-12-13 | Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IO… |
CVE-2022-25692 | High | 7.5 | 2022-12-13 | Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industria… |
CVE-2022-25691 | High | 7.5 | 2022-12-13 | Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile |
CVE-2022-25689 | High | 7.5 | 2022-12-13 | Denial of service in Modem due to reachable assertion in Snapdragon Mobile |
CVE-2022-25675 | Medium | 5.5 | 2022-12-13 | Denial of service due to reachable assertion in modem while processing filter rule from application client in Snapdragon Compute, Snapdragon Industrial IOT, Sn… |
CVE-2022-25673 | High | 7.5 | 2022-12-13 | Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile |
CVE-2022-25672 | High | 7.5 | 2022-12-13 | Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile |
CVE-2022-41901 | Medium | 4.8 | 2022-11-18 | TensorFlow is an open source platform for machine learning. An input `sparse_matrix` that is not a matrix with a shape with rank 0 will trigger a `CHECK` fail… |
CVE-2022-41899 | Medium | 4.8 | 2022-11-18 | TensorFlow is an open source platform for machine learning. Inputs `dense_features` or `example_state_data` not of rank 2 will trigger a `CHECK` fail in `SdcaO… |
CVE-2022-41893 | Medium | 4.8 | 2022-11-18 | TensorFlow is an open source platform for machine learning. If `tf.raw_ops.TensorListResize` is given a nonscalar value for input `size`, it results `CHECK` fa… |
CVE-2022-25671 | High | 7.5 | 2022-11-15 | Denial of service in MODEM due to reachable assertion in Snapdragon Mobile |
CVE-2022-26446 | High | 7.5 | 2022-11-08 | In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SI… |
CVE-2022-36016 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `tensorflow::full_type::SubstituteFromAttrs` receives a `FullTypeDef& t` that is not exactly t… |
CVE-2022-36012 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes, it crashe… |
CVE-2022-36005 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_gradient` receives input `min` or `max` that is… |
CVE-2022-36004 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `tf.random.gamma` receives large input shape and rates, it gives a `CHECK` fail that can trigg… |
CVE-2022-36003 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `RandomPoissonV2` receives large input shape and rates, it gives a `CHECK` fail that can trigg… |
CVE-2022-36002 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `Unbatch` receives a nonscalar input `id`, it gives a `CHECK` fail that can trigger a denial o… |
CVE-2022-36001 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. When `DrawBoundingBoxes` receives an input `boxes` that is not of dtype `float`, it gives a `CHECK`… |