CWE-617 · Reachable Assertion (page 9)
Page 9 of 9 — CVEs classified under CWE-617, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7712 | High | 7.5 | 2018-03-05 | The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failu… |
CVE-2017-17722 | Medium | 6.5 | 2018-02-12 | In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote denial of service attack via a crafte… |
CVE-2018-5269 | Medium | 5.5 | 2018-01-08 | In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast. |
CVE-2017-16818 | Medium | 6.5 | 2017-12-20 | RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveragi… |
CVE-2017-17432 | High | 7.5 | 2017-12-06 | OpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which allows remote attackers to cause a denial of service (system crash or application cr… |
CVE-2017-15371 | Medium | 5.5 | 2017-10-16 | There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of… |
CVE-2017-1000252 | Medium | 5.5 | 2017-09-26 | The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion failure, and hypervisor hang or crash) via a… |
CVE-2017-14649 | Medium | 5.5 | 2017-09-21 | ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service (assertion failure in magi… |
CVE-2017-12168 | Medium | 6.0 | 2017-09-20 | The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service… |
CVE-2017-13673 | Medium | 6.5 | 2017-08-29 | The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service (assertion fail… |
CVE-2017-13752 | High | 7.5 | 2017-08-29 | There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack. |
CVE-2017-13751 | High | 7.5 | 2017-08-29 | There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack. |
CVE-2017-13750 | High | 7.5 | 2017-08-29 | There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service… |
CVE-2017-13749 | High | 7.5 | 2017-08-29 | There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will lead to a remote denial of service attack. |
CVE-2017-13747 | High | 7.5 | 2017-08-29 | There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12 that will lead to a remote denial of service attack. |
CVE-2017-13746 | High | 7.5 | 2017-08-29 | There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of service… |
CVE-2017-13745 | High | 7.5 | 2017-08-29 | There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attac… |
CVE-2017-13727 | Medium | 6.5 | 2017-08-29 | There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted inpu… |
CVE-2017-13726 | Medium | 6.5 | 2017-08-29 | There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will… |
CVE-2017-13658 | Medium | 6.5 | 2017-08-24 | In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of servic… |
CVE-2017-13132 | Medium | 6.5 | 2017-08-23 | In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump uncompressed PseudoColor packets" step… |
CVE-2017-12960 | High | 7.5 | 2017-08-18 | There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to r… |
CVE-2017-12959 | High | 7.5 | 2017-08-18 | There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to a… |
CVE-2017-11368 | Medium | 6.5 | 2017-08-09 | In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests. |
CVE-2017-12670 | Medium | 6.5 | 2017-08-07 | In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion failure in the function DestroyImage in MagickCore/image.c, which… |
CVE-2017-12434 | Medium | 6.5 | 2017-08-04 | In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of… |
CVE-2017-11692 | High | 7.5 | 2017-07-30 | The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service (assertion failure and ap… |
CVE-2017-11683 | Medium | 6.5 | 2017-07-27 | There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of servi… |
CVE-2017-11524 | Medium | 6.5 | 2017-07-23 | The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial of service (asserti… |
CVE-2017-7508 | High | 7.5 | 2017-06-27 | OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet. |
CVE-2017-0376 | High | 7.5 | 2017-06-09 | The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_cell funct… |
CVE-2017-0375 | High | 7.5 | 2017-06-09 | The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the relay_send_end_cell_from_edge_ function… |
CVE-2017-9501 | Medium | 6.5 | 2017-06-07 | In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted… |
CVE-2017-9500 | Medium | 6.5 | 2017-06-07 | In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of service via a… |
CVE-2017-9499 | Medium | 6.5 | 2017-06-07 | In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function SetPixelChannelAttributes, which allows attackers to cause a denial of service via a… |
CVE-2017-8915 | High | 7.5 | 2017-05-23 | sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to cause a denial of service (assertion failure and service crash) by pushing a package… |
CVE-2017-9142 | Medium | 6.5 | 2017-05-22 | In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the R… |
CVE-2017-9141 | Medium | 6.5 | 2017-05-22 | In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function in MagickCore/profile.c because of miss… |
CVE-2017-7479 | Medium | 6.5 | 2017-05-15 | OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Service of ser… |
CVE-2017-7478 | High | 7.5 | 2017-05-15 | OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed… |
CVE-2017-8372 | Medium | 4.7 | 2017-05-01 | The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a denial of service (assertion fa… |
CVE-2017-7605 | High | 7.8 | 2017-04-09 | aacplusenc.c in HE-AAC+ Codec (aka libaacplus) 2.0.2 has an assertion failure, which might allow remote attackers to cause a denial of service (application cra… |
CVE-2016-9399 | High | 7.5 | 2017-03-23 | The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. |
CVE-2016-9398 | High | 7.5 | 2017-03-23 | The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vec… |
CVE-2016-9397 | High | 7.5 | 2017-03-23 | The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. |
CVE-2016-9388 | Medium | 5.5 | 2017-03-23 | The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image fi… |
CVE-2017-5981 | Medium | 5.5 | 2017-03-01 | seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file. |
CVE-2017-5986 | Medium | 5.5 | 2017-02-18 | Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users to cause a denial of service (ass… |
CVE-2015-8745 | Medium | 5.5 | 2016-12-29 | QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It could occur while reading Interrupt Mas… |
CVE-2016-8864 | High | 7.5 | 2016-11-02 | named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion fai… |
CVE-2010-3411 | | 2010-09-16 | Google Chrome before 6.0.472.59 on Linux does not properly handle cursors, which might allow attackers to cause a denial of service (assertion failure) via uns… | |
CVE-2006-6767 | High | 7.5 | 2007-01-16 | oftpd before 0.3.7 allows remote attackers to cause a denial of service (daemon abort) via a (1) LPRT or (2) LPASV command with an unsupported address family… |
CVE-2006-6811 | Medium | 6.5 | 2006-12-29 | KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to an Internet Relay Chat (IRC) server, whi… |
CVE-2006-5779 | High | 7.5 | 2006-11-07 | OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an as… |
CVE-2006-4574 | High | 7.5 | 2006-10-28 | Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (c… |
CVE-2006-4095 | High | 7.5 | 2006-09-06 | BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion f… |