CWE-617: Reachable Assertion, page 14

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

What the weakness is: CWE-617 at MITRE

1. 7.5CVE-2022-0635EPSS 1.4%2022-03-23

   Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a failed assertion check.

2. 5.5CVE-2022-25484EPSS 0.6%2022-03-22

   tcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in tcpprep v4.4.1.

3. 7.5CVE-2022-0667EPSS 1.4%2022-03-22

   When the vulnerability is triggered the BIND process will exit. BIND 9.18.0

4. 6.5CVE-2022-0865EPSS 1.5%2022-03-10

   Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045.

5. 5.5CVE-2021-45861EPSS 0.7%2022-03-02

   There is an Assertion `num <= INT_BIT' failed at BitStreamReader::skipBits in /bitStream.h:132 of tsMuxer git-c6a0277.

6. 5.5CVE-2022-22901EPSS 0.7%2022-02-17

   There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at parser_parse_function_arguments in /js/js-parser.c of JerryScript commit a6ab5e9.

7. 5.5CVE-2021-45387EPSS 0.7%2022-02-11

   tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv4() at tree.c.

8. 5.5CVE-2021-45386EPSS 0.7%2022-02-11

   tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv6() at tree.c

9. 7.5CVE-2021-30326EPSS 0.6%2022-02-11

   Possible assertion due to improper size validation while processing the DownlinkPreemption IE in an RRC Reconfiguration/RRC Setup message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdrago…

10. 6.5CVE-2022-23588EPSS 0.9%2022-02-04

    Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that Grappler optimizer would attempt to build a tensor using a reference `dtype`. This would result in…

11. 6.5CVE-2022-23586EPSS 0.8%2022-02-04

    Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that assertions in `function.cc` would be falsified and crash the Python interpreter. The fix will be i…

12. 6.5CVE-2022-23583EPSS 0.9%2022-02-04

    Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that any binary op would trigger `CHECK` failures. This occurs when the protobuf part corresponding to …

13. 6.5CVE-2022-23582EPSS 0.8%2022-02-04

    Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that `TensorByteSize` would trigger `CHECK` failures. `TensorShape` constructor throws a `CHECK`-fail i…

14. 6.5CVE-2022-23581EPSS 1.2%2022-02-04

    Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `IsSimplifiableReshape` would trigger `CHECK` failures. The fix wil…

15. 6.5CVE-2022-23579EPSS 0.8%2022-02-04

    Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `SafeToRemoveIdentity` would trigger `CHECK` failures. The fix will…

16. 6.5CVE-2022-23572EPSS 1.0%2022-02-04

    Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, TensorFlow can fail to specialize a type during shape inference. This case is covered by the `DCHECK` function however, `DCHECK` is a no-op in production bui…

17. 6.5CVE-2022-23571EPSS 0.5%2022-02-04

    Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, a TensorFlow process can encounter cases where a `CHECK` assertion is invalidated based on user controlled arguments, if the tensors have an inv…

18. 6.5CVE-2022-23570EPSS 1.0%2022-02-04

    Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mutable arguments to some operations are missing from the proto. This is guarded by…

19. 6.5CVE-2022-23565EPSS 0.5%2022-02-04

    Tensorflow is an Open Source Machine Learning Framework. An attacker can trigger denial of service via assertion failure by altering a `SavedModel` on disk such that `AttrDef`s of some operation are duplicated. The fix will be included in …

20. 6.5CVE-2022-23564EPSS 0.5%2022-02-04

    Tensorflow is an Open Source Machine Learning Framework. When decoding a resource handle tensor from protobuf, a TensorFlow process can encounter cases where a `CHECK` assertion is invalidated based on user controlled arguments. This allow…

21. 6.5CVE-2022-23569EPSS 0.5%2022-02-03

    Tensorflow is an Open Source Machine Learning Framework. Multiple operations in TensorFlow can be used to trigger a denial of service via `CHECK`-fails (i.e., assertion failures). This is similar to TFSA-2021-198 and has similar fixes. We …

22. 5.5CVE-2021-46666EPSS 0.4%2022-02-01

    MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause.

23. 5.5CVE-2021-46517EPSS 0.6%2022-01-27

    There is an Assertion `mjs_stack_size(&mjs->scopes) > 0' failed at src/mjs_exec.c in Cesanta MJS v2.20.0.

24. 5.5CVE-2021-46515EPSS 0.6%2022-01-27

    There is an Assertion `mjs_stack_size(&mjs->scopes) >= scopes_len' failed at src/mjs_exec.c in Cesanta MJS v2.20.0.

25. 5.5CVE-2021-46514EPSS 0.6%2022-01-27

    There is an Assertion 'ppos != NULL && mjs_is_number(*ppos)' failed at src/mjs_core.c in Cesanta MJS v2.20.0.

26. 5.5CVE-2021-46511EPSS 0.6%2022-01-27

    There is an Assertion `m->len >= sizeof(v)' failed at src/mjs_core.c in Cesanta MJS v2.20.0.

27. 5.5CVE-2021-46510EPSS 0.6%2022-01-27

    There is an Assertion `s < mjs->owned_strings.buf + mjs->owned_strings.len' failed at src/mjs_gc.c in Cesanta MJS v2.20.0.

28. 5.5CVE-2021-46508EPSS 0.6%2022-01-27

    There is an Assertion `i < parts_cnt' failed at src/mjs_bcode.c in Cesanta MJS v2.20.0.

29. 5.5CVE-2021-46506EPSS 0.6%2022-01-27

    There is an Assertion 'v->d.lval != v' failed at src/jsiValue.c in Jsish v3.5.0.

30. 5.5CVE-2021-46504EPSS 0.6%2022-01-27

    There is an Assertion 'vp != resPtr' failed at jsiEval.c in Jsish v3.5.0.

31. 5.5CVE-2021-44994EPSS 1.0%2022-01-25

    There is an Assertion ''JERRY_CONTEXT (jmem_heap_allocated_size) == 0'' failed at /jerry-core/jmem/jmem-heap.c in Jerryscript 3.0.0.

32. 5.5CVE-2021-44993EPSS 0.8%2022-01-25

    There is an Assertion ''ecma_is_value_boolean (base_value)'' failed at /jerry-core/ecma/operations/ecma-get-put-value.c in Jerryscript 3.0.0.

33. 5.5CVE-2022-22892EPSS 0.6%2022-01-21

    There is an Assertion 'ecma_is_value_undefined (value) || ecma_is_value_null (value) || ecma_is_value_boolean (value) || ecma_is_value_number (value) || ecma_is_value_string (value) || ecma_is_value_bigint (value) || ecma_is_value_symbol (…

34. 5.5CVE-2022-22890EPSS 0.8%2022-01-20

    There is an Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT && arguments_type != SCANNER_ARGUMENTS_PRESENT_NO_REG' failed at /jerry-core/parser/js/js-scanner-util.c in Jerryscript 3.0.0.

35. 5.5CVE-2021-46351EPSS 0.6%2022-01-20

    There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.c(ecma_builtin_date_prototype_dispatch_set):421 in JerryScript 3.0.0.

36. 5.5CVE-2021-46350EPSS 0.6%2022-01-20

    There is an Assertion 'ecma_is_value_object (value)' failed at jerryscript/jerry-core/ecma/base/ecma-helpers-value.c in JerryScript 3.0.0.

37. 5.5CVE-2021-46349EPSS 0.6%2022-01-20

    There is an Assertion 'type == ECMA_OBJECT_TYPE_GENERAL || type == ECMA_OBJECT_TYPE_PROXY' failed at /jerry-core/ecma/operations/ecma-objects.c in JerryScript 3.0.0.

38. 5.5CVE-2021-46348EPSS 0.6%2022-01-20

    There is an Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed at /jerry-core/ecma/base/ecma-literal-storage.c in JerryScript 3.0.0.

39. 5.5CVE-2021-46347EPSS 0.6%2022-01-20

    There is an Assertion 'ecma_object_check_class_name_is_object (obj_p)' failed at /jerry-core/ecma/operations/ecma-objects.c in JerryScript 3.0.0.

40. 5.5CVE-2021-46346EPSS 0.6%2022-01-20

    There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.c(ecma_builtin_date_prototype_dispatch_set):421 in JerryScript 3.0.0.

41. 5.5CVE-2021-46345EPSS 0.6%2022-01-20

    There is an Assertion 'cesu8_cursor_p == cesu8_end_p' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0.

42. 5.5CVE-2021-46344EPSS 0.6%2022-01-20

    There is an Assertion 'flags & PARSER_PATTERN_HAS_REST_ELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0.

43. 5.5CVE-2021-46343EPSS 0.6%2022-01-20

    There is an Assertion 'context_p->token.type == LEXER_LITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0.

44. 5.5CVE-2021-46342EPSS 0.6%2022-01-20

    There is an Assertion 'ecma_is_lexical_environment (obj_p) || !ecma_op_object_is_fast_array (obj_p)' failed at /jerry-core/ecma/base/ecma-helpers.c in JerryScript 3.0.0.

45. 5.5CVE-2021-46340EPSS 0.6%2022-01-20

    There is an Assertion 'context_p->stack_top_uint8 == SCAN_STACK_TRY_STATEMENT || context_p->stack_top_uint8 == SCAN_STACK_CATCH_STATEMENT' failed at /parser/js/js-scanner.c(scanner_scan_statement_end) in JerryScript 3.0.0.

46. 5.5CVE-2021-46339EPSS 0.6%2022-01-20

    There is an Assertion 'lit_is_valid_cesu8_string (string_p, string_size)' failed at /base/ecma-helpers-string.c(ecma_new_ecma_string_from_utf8) in JerryScript 3.0.0.

47. 5.5CVE-2021-46338EPSS 0.7%2022-01-20

    There is an Assertion 'ecma_is_lexical_environment (object_p)' failed at /base/ecma-helpers.c(ecma_get_lex_env_type) in JerryScript 3.0.0.

48. 5.5CVE-2021-46337EPSS 0.6%2022-01-20

    There is an Assertion 'page_p != NULL' failed at /parser/js/js-parser-mem.c(parser_list_get) in JerryScript 3.0.0.

49. 5.5CVE-2021-46336EPSS 0.6%2022-01-20

    There is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at /parser/js/js-parser-expr.c(parser_parse_class_body) in JerryScript 3.0.0.

50. 7.5CVE-2021-30353EPSS 0.6%2022-01-13

    Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music…