CWE-617: Reachable Assertion, page 12

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

What the weakness is: CWE-617 at MITRE

1. 5.5CVE-2023-28425EPSS 59%2023-03-20

   Redis is an in-memory database that persists on disk. Starting in version 7.0.8 and prior to version 7.0.10, authenticated users can use the MSETNX command to trigger a runtime assertion and termination of the Redis server process. The pro…

2. 7.5CVE-2023-27789EPSS 1.5%2023-03-16

   An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint.

3. 7.5CVE-2023-27788EPSS 1.4%2023-03-16

   An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint.

4. 7.5CVE-2023-27783EPSS 1.5%2023-03-16

   An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt_cleanup function at plugins/dlt_plugins.c.

5. 7.5CVE-2022-40527EPSS 0.4%2023-03-10

   Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM.

6. 7.5CVE-2022-33272EPSS 0.4%2023-03-10

   Transient DOS in modem due to reachable assertion.

7. 7.5CVE-2022-33254EPSS 0.4%2023-03-10

   Transient DOS due to reachable assertion in Modem while processing SIB1 Message.

8. 7.5CVE-2022-33250EPSS 0.4%2023-03-10

   Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover.

9. 7.5CVE-2022-33244EPSS 0.4%2023-03-10

   Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout

10. 7.5CVE-2022-48363EPSS 1.2%2023-02-26

    In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving truncated files. Eventually there is an assertion failure in libmpdclient becau…

11. 7.5CVE-2022-3924EPSS 16%2023-01-26

    This issue can affect BIND 9 resolvers with `stale-answer-enable yes;` that also make use of the option `stale-answer-client-timeout`, configured with a value greater than zero. If the resolver receives many queries that require recursion…

12. 7.5CVE-2022-3488EPSS 19%2023-01-26

    Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure. 'Broken' in this context is anything that wo…

13. 7.5CVE-2020-36562EPSS 0.8%2022-12-28

    Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector.

14. 7.5CVE-2022-47516EPSS 1.8%2022-12-18

    An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.…

15. 7.5CVE-2022-25702EPSS 0.4%2022-12-13

    Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

16. 7.5CVE-2022-25692EPSS 0.4%2022-12-13

    Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

17. 7.5CVE-2022-25691EPSS 0.4%2022-12-13

    Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile

18. 7.5CVE-2022-25689EPSS 0.4%2022-12-13

    Denial of service in Modem due to reachable assertion in Snapdragon Mobile

19. 5.5CVE-2022-25675EPSS 0.1%2022-12-13

    Denial of service due to reachable assertion in modem while processing filter rule from application client in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile

20. 7.5CVE-2022-25673EPSS 0.4%2022-12-13

    Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile

21. 7.5CVE-2022-25672EPSS 0.4%2022-12-13

    Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile

22. 7.5CVE-2022-41901EPSS 0.5%2022-11-18

    TensorFlow is an open source platform for machine learning. An input `sparse_matrix` that is not a matrix with a shape with rank 0 will trigger a `CHECK` fail in `tf.raw_ops.SparseMatrixNNZ`. We have patched the issue in GitHub commit f856…

23. 7.5CVE-2022-41899EPSS 0.5%2022-11-18

    TensorFlow is an open source platform for machine learning. Inputs `dense_features` or `example_state_data` not of rank 2 will trigger a `CHECK` fail in `SdcaOptimizer`. We have patched the issue in GitHub commit 80ff197d03db2a70c6a111f97d…

24. 7.5CVE-2022-41893EPSS 0.5%2022-11-18

    TensorFlow is an open source platform for machine learning. If `tf.raw_ops.TensorListResize` is given a nonscalar value for input `size`, it results `CHECK` fail which can be used to trigger a denial of service attack. We have patched the …

25. 7.5CVE-2022-25671EPSS 0.5%2022-11-15

    Denial of service in MODEM due to reachable assertion in Snapdragon Mobile

26. 7.5CVE-2022-26446EPSS 1.2%2022-11-08

    In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SIB12 (CMAS message), with no additional execution privileges needed. User interac…

27. 7.5CVE-2022-36016EPSS 0.7%2022-09-16

    TensorFlow is an open source platform for machine learning. When `tensorflow::full_type::SubstituteFromAttrs` receives a `FullTypeDef& t` that is not exactly three args, it triggers a `CHECK`-fail instead of returning a status. We have pat…

28. 7.5CVE-2022-36012EPSS 0.7%2022-09-16

    TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is given empty function attributes, it crashes. We have patched the issue in GitHub commit ad069af92392efee1418c48ff561fd3070…

29. 7.5CVE-2022-36005EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_gradient` receives input `min` or `max` that is nonscalar, it gives a `CHECK` fail that can trigger a denial of service attack. …

30. 7.5CVE-2022-36004EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. When `tf.random.gamma` receives large input shape and rates, it gives a `CHECK` fail that can trigger a denial of service attack. We have patched the issue in GitHub commit 552bfc…

31. 7.5CVE-2022-36003EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. When `RandomPoissonV2` receives large input shape and rates, it gives a `CHECK` fail that can trigger a denial of service attack. We have patched the issue in GitHub commit 552bfc…

32. 7.5CVE-2022-36002EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. When `Unbatch` receives a nonscalar input `id`, it gives a `CHECK` fail that can trigger a denial of service attack. We have patched the issue in GitHub commit 4419d10d576adefa36b…

33. 7.5CVE-2022-36001EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. When `DrawBoundingBoxes` receives an input `boxes` that is not of dtype `float`, it gives a `CHECK` fail that can trigger a denial of service attack. We have patched the issue in …

34. 7.5CVE-2022-35999EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. When `Conv2DBackpropInput` receives empty `out_backprop` inputs (e.g. `[3, 1, 0, 1]`), the current CPU/GPU kernels `CHECK` fail (one with dnnl, the other with cudnn). This can be …

35. 7.5CVE-2022-35998EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. If `EmptyTensorList` receives an input `element_shape` with more than one dimension, it gives a `CHECK` fail that can be used to trigger a denial of service attack. We have patche…

36. 7.5CVE-2022-35997EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. If `tf.sparse.cross` receives an input `separator` that is not a scalar, it gives a `CHECK` fail that can be used to trigger a denial of service attack. We have patched the issue …

37. 7.5CVE-2022-35995EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. When `AudioSummaryV2` receives an input `sample_rate` with more than one element, it gives a `CHECK` fails that can be used to trigger a denial of service attack. We have patched …

38. 7.5CVE-2022-35994EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. When `CollectiveGather` receives an scalar input `input`, it gives a `CHECK` fails that can be used to trigger a denial of service attack. We have patched the issue in GitHub comm…

39. 7.5CVE-2022-35993EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. When `SetSize` receives an input `set_shape` that is not a 1D tensor, it gives a `CHECK` fails that can be used to trigger a denial of service attack. We have patched the issue in…

40. 7.5CVE-2022-35992EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. When `TensorListFromTensor` receives an `element_shape` of a rank greater than one, it gives a `CHECK` fail that can trigger a denial of service attack. We have patched the issue …

41. 7.5CVE-2022-35991EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. When `TensorListScatter` and `TensorListScatterV2` receive an `element_shape` of a rank greater than one, they give a `CHECK` fail that can trigger a denial of service attack. We …

42. 5.5CVE-2022-40755EPSS 0.4%2022-09-16

    JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c.

43. 7.5CVE-2022-36026EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. If `QuantizeAndDequantizeV3` is given a nonscalar `num_bits` input tensor, it results in a `CHECK` fail that can be used to trigger a denial of service attack. We have patched the…

44. 7.5CVE-2022-36019EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVarsPerChannel` is given `min` or `max` tensors of a rank other than one, it results in a `CHECK` fail that can be used to trigger a denial of service attac…

45. 7.5CVE-2022-36018EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. If `RaggedTensorToVariant` is given a `rt_nested_splits` list that contains tensors of ranks other than one, it results in a `CHECK` fail that can be used to trigger a denial of s…

46. 7.5CVE-2022-35990EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_per_channel_gradient` receives input `min` or `max` of rank other than 1, it gives a `CHECK` fail that can trigger a denial of s…

47. 7.5CVE-2022-35989EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. When `MaxPool` receives a window size input array `ksize` with dimensions greater than its input tensor `input`, the GPU kernel gives a `CHECK` fail that can be used to trigger a …

48. 7.5CVE-2022-35988EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. When `tf.linalg.matrix_rank` receives an empty input `a`, the GPU kernel gives a `CHECK` fail that can be used to trigger a denial of service attack. We have patched the issue in …

49. 7.5CVE-2022-35987EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. `DenseBincount` assumes its input tensor `weights` to either have the same shape as its input tensor `input` or to be length-0. A different `weights` shape will trigger a `CHECK` …

50. 7.5CVE-2022-35985EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. If `LRNGrad` is given an `output_image` input tensor that is not 4-D, it results in a `CHECK` fail that can be used to trigger a denial of service attack. We have patched the issu…