Skip to content
Noroxi

CWE-617 · 886 records

Reachable Assertion

CVEs in this class

888 records

  • CVE-2020-8617
    60This week

    A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c

    MediumCVSS 5.9WeaponizedEPSS 93%

    isc · bindMay 19, 2020

  • CVE-2020-36222
    53Plan

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial

    HighCVSS 7.5No exploitEPSS 77%

    openldap · openldapJan 26, 2021

  • CVE-2006-5779
    53Plan

    OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, w

    HighCVSS 7.5No exploitEPSS 76%

    openldap · openldapNov 7, 2006

  • CVE-2021-27212
    50Plan

    In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function vi

    HighCVSS 7.5No exploitEPSS 66%

    openldap · openldapFeb 14, 2021

  • CVE-2018-5740
    48Plan

    A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named

    HighCVSS 7.5Proof of conceptEPSS 60%

    isc · bindJan 16, 2019

  • CVE-2016-8864
    42Plan

    named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of ser

    HighCVSS 7.5No exploitEPSS 38%

    isc · bindNov 2, 2016

  • CVE-2018-12543
    41Plan

    In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that has a topic starting with $, but that is n

    HighCVSS 7.5No exploitEPSS 36%

    eclipse · mosquittoNov 15, 2018

  • CVE-2019-9795
    40Plan

    A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could potentially be used by malicious JavaScript to trigg

    CriticalCVSS 9.8No exploitEPSS 1%

    mozilla · firefoxApr 26, 2019

  • CVE-2020-3615
    39Monitor

    Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disassoc frames due to im

    CriticalCVSS 9.8No exploitEPSS 0%

    qualcomm · apq8009 firmwareJun 2, 2020

  • CVE-2022-3488
    36Monitor

    named may terminate unexpectedly when processing ECS options in repeated responses to iterative queries

    HighCVSS 7.5No exploitEPSS 19%

    isc · bindJan 26, 2023

  • CVE-2020-12417
    36Monitor

    Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a po

    HighCVSS 8.8No exploitEPSS 2%

    mozilla · firefoxJul 9, 2020

  • CVE-2026-102070
    36Monitor

    Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used

    CriticalCVSS 9.2No exploitEPSS 0%

    juniper networks · junos osOct 14, 2026

  • CVE-2026-41584
    36Monitor

    ZEBRA: rk Identity Point Panic in Transaction Verification

    CriticalCVSS 9.2No exploitEPSS 0%

    zfnd · zebra-chainMay 8, 2026

  • CVE-2022-3924
    35Monitor

    named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota

    HighCVSS 7.5No exploitEPSS 15%

    isc · bindJan 26, 2023

  • CVE-2026-94450
    35Monitor

    Potential denial of service when configured to send Retry packets in s2n-quic

    HighCVSS 8.7No exploitEPSS 1%

    aws · s2n-quicSep 22, 2026

  • CVE-2020-6623
    35Monitor

    stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.

    HighCVSS 8.8No exploitEPSS 1%

    nothings · stb truetype.hJan 8, 2020

  • CVE-2020-6617
    35Monitor

    stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.

    HighCVSS 8.8No exploitEPSS 1%

    nothings · stb truetype.hJan 8, 2020

  • CVE-2020-6619
    35Monitor

    stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.

    HighCVSS 8.8No exploitEPSS 1%

    nothings · stb truetype.hJan 8, 2020

  • CVE-2026-31739
    35Monitor

    crypto: tegra - Add missing CRYPTO_ALG_ASYNC

    HighCVSS 8.8No exploitEPSS 0%

    linux · linux kernelMay 1, 2026

  • CVE-2026-52952
    35Monitor

    iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset

    HighCVSS 8.8No exploitEPSS 0%

    linux · linux kernelJun 24, 2026

  • CVE-2017-7478
    34Monitor

    OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet.

    HighCVSS 7.5Proof of conceptEPSS 13%

    openvpn · openvpnMay 15, 2017

  • CVE-2020-36230
    34Monitor

    A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_elemen

    HighCVSS 7.5No exploitEPSS 12%

    openldap · openldapJan 26, 2021

  • CVE-2006-4095
    34Monitor

    BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which c

    HighCVSS 7.5No exploitEPSS 11%

    isc · bindSep 5, 2006

  • CVE-2021-25215
    34Monitor

    An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself

    HighCVSS 7.5No exploitEPSS 11%

    debian · debian linuxApr 28, 2021

  • CVE-2023-37020
    34Monitor

    Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface.

    HighCVSS 8.6No exploitEPSS 0%

    open5gs · open5gsJan 22, 2025

All vulnerability classes