CWE-617: Reachable Assertion, page 11

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

What the weakness is: CWE-617 at MITRE

1. 7.5CVE-2023-32844EPSS 1.4%2023-12-04

   In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed…

2. 7.5CVE-2023-32843EPSS 1.4%2023-12-04

   In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed…

3. 7.5CVE-2023-32842EPSS 1.4%2023-12-04

   In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed…

4. 7.5CVE-2023-32841EPSS 1.4%2023-12-04

   In 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malformed RRC messages, with no additional execution privileges needed. User interaction is not needed…

5. 5.3CVE-2023-5871EPSS 1.1%2023-11-27

   A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network. This issue may allow a malicious NBD server to cause a Denial of Service.

6. 5.5CVE-2023-38473EPSS 0.3%2023-11-02

   A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.

7. 5.5CVE-2023-38472EPSS 0.3%2023-11-02

   A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.

8. 5.5CVE-2023-38471EPSS 0.3%2023-11-02

   A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.

9. 5.5CVE-2023-38470EPSS 0.3%2023-11-02

   A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.

10. 5.5CVE-2023-38469EPSS 0.3%2023-11-02

    A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.

11. 7.5CVE-2023-44175EPSS 0.6%2023-10-12

    A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows to send specific genuine PIM packets to the device resulting in rpd to crash causing a Denial of Service (DoS…

12. 5.3CVE-2023-44386EPSS 0.7%2023-10-05

    Vapor is an HTTP web framework for Swift. There is a denial of service vulnerability impacting all users of affected versions of Vapor. The HTTP1 error handler closed connections when HTTP parse errors occur instead of passing them on. The…

13. 7.5CVE-2023-24843EPSS 0.4%2023-10-03

    Transient DOS in Modem while triggering a camping on an 5G cell.

14. 7.5CVE-2023-32820EPSS 0.5%2023-10-02

    In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

15. 7.5CVE-2023-4236EPSS 2.2%2023-09-20

    A flaw in the networking code handling DNS-over-TLS queries may cause `named` to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query loa…

16. 5.6CVE-2023-3301EPSS 0.3%2023-09-13

    A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an asse…

17. 7.5CVE-2023-21653EPSS 0.4%2023-09-05

    Transient DOS in Modem while processing RRC reconfiguration message.

18. 7.5CVE-2023-21646EPSS 0.4%2023-09-05

    Transient DOS in Modem while processing invalid System Information Block 1.

19. 6.5CVE-2022-38349EPSS 1.1%2023-08-22

    An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an embedded file.

20. 6.5CVE-2022-37052EPSS 1.1%2023-08-22

    A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject.

21. 6.5CVE-2022-37051EPSS 1.1%2023-08-22

    An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream check before saving an embedded file.

22. 5.5CVE-2022-35205EPSS 0.4%2023-08-22

    An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial of service.

23. 6.5CVE-2021-46179EPSS 0.5%2023-08-22

    Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx function.

24. 7.5CVE-2023-38976EPSS 2.1%2023-08-21

    An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function.

25. 7.5CVE-2023-39949EPSS 1.0%2023-08-11

    eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.9.1 and 2.6.5, improper validation of sequence numbers may lead to remotely reachable assertion failure…

26. 7.5CVE-2023-39534EPSS 1.0%2023-08-11

    eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0, 2.9.2, and 2.6.5, a malformed GAP submessage can trigger assertion failure, crashing FastDDS. Ver…

27. 5.9CVE-2021-31294EPSS 1.3%2023-07-15

    Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command). NOTE: this was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were n…

28. 5.5CVE-2023-36840EPSS 0.2%2023-07-14

    A Reachable Assertion vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a locally-based, low-privileged attacker to cause a Denial of Service (DoS). On all Junos OS and Junos OS Evolve…

29. 6.5CVE-2023-37836EPSS 0.6%2023-07-13

    libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.

30. 7.5CVE-2023-34868EPSS 0.7%2023-06-14

    Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the parser_parse_for_statement_start at jerry-core/parser/js/js-parser-statm.c.

31. 7.5CVE-2023-34867EPSS 0.7%2023-06-14

    Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_property_hashmap_create at jerry-core/ecma/base/ecma-property-hashmap.c.

32. 7.5CVE-2023-1428EPSS 0.4%2023-06-09

    There exists an vulnerability causing an abort() to be called in gRPC.  The following headers cause gRPC's C++ implementation to abort() when called via http2: te: x (x != trailers) :scheme: x (x != http, https) grpclb_client_stats: x (…

33. 7.5CVE-2022-40538EPSS 0.4%2023-06-06

    Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network.

34. 7.5CVE-2022-33251EPSS 0.4%2023-06-06

    Transient DOS due to reachable assertion in Modem because of invalid network configuration.

35. 7.5CVE-2022-22060EPSS 0.4%2023-06-06

    Assertion occurs while processing Reconfiguration message due to improper validation

36. 5.3CVE-2023-33199EPSS 0.7%2023-05-26

    Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. A malformed proposed entry of the `intoto/v0.0.2` type can cause a panic on a thread within the Rekor process.…

37. 7.5CVE-2023-23759EPSS 0.7%2023-05-18

    There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely. This behavior requires the client supported cipher advertisement changing between the original ClientHello and the second…

38. 5.5CVE-2023-31921EPSS 0.3%2023-05-12

    Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_big_uint_div_mod at jerry-core/ecma/operations/ecma-big-uint.c.

39. 5.5CVE-2023-31920EPSS 0.3%2023-05-12

    Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the vm_loop at jerry-core/vm/vm.c.

40. 5.5CVE-2023-31919EPSS 0.3%2023-05-12

    Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the jcontext_raise_exception at jerry-core/jcontext/jcontext.c.

41. 5.5CVE-2023-31918EPSS 0.3%2023-05-12

    Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the parser_parse_function_arguments at jerry-core/parser/js/js-parser.c.

42. 5.5CVE-2023-31916EPSS 0.3%2023-05-12

    Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the jmem_heap_finalize at jerry-core/jmem/jmem-heap.c.

43. 5.5CVE-2023-31913EPSS 0.3%2023-05-12

    Jerryscript 3.0 *commit 1a2c047) was discovered to contain an Assertion Failure via the component parser_parse_class at jerry-core/parser/js/js-parser-expr.c.

44. 7.5CVE-2023-2156EPSS 6.2%2023-05-09

    A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an …

45. 5.5CVE-2023-29935EPSS 0.2%2023-05-05

    llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced.

46. 7.5CVE-2022-40504EPSS 0.4%2023-05-02

    Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.

47. 7.5CVE-2022-40508EPSS 0.4%2023-05-02

    Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.

48. 7.5CVE-2022-34144EPSS 0.4%2023-05-02

    Transient DOS due to reachable assertion in Modem during OSI decode scheduling.

49. 6.5CVE-2023-28856EPSS 1.3%2023-04-18

    Redis is an open source, in-memory database that persists on disk. Authenticated users can use the `HINCRBYFLOAT` command to create an invalid hash field that will crash Redis on access in affected versions. This issue has been addressed i…

50. 7.5CVE-2022-36440EPSS 1.6%2023-04-03

    A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function. Attackers can maliciously construct BGP open packets and send them to BGP peers running frr-bgpd, resulting in DoS.