İçeriğe atla
Noroxi

CWE-617 · 886 kayıt

Reachable Assertion

Bu sınıftaki CVE’ler

888 kayıt

  • CVE-2020-8617
    60Bu hafta

    A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c

    OrtaCVSS 5,9SilahlaştırılmışEPSS %93

    isc · bind19 May 2020

  • CVE-2020-36222
    53Planlayın

    A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial

    YüksekCVSS 7,5İstismar yokEPSS %77

    openldap · openldap26 Oca 2021

  • CVE-2006-5779
    53Planlayın

    OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, w

    YüksekCVSS 7,5İstismar yokEPSS %76

    openldap · openldap7 Kas 2006

  • CVE-2021-27212
    50Planlayın

    In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function vi

    YüksekCVSS 7,5İstismar yokEPSS %66

    openldap · openldap14 Şub 2021

  • CVE-2018-5740
    48Planlayın

    A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named

    YüksekCVSS 7,5Kavram kanıtıEPSS %60

    isc · bind16 Oca 2019

  • CVE-2016-8864
    42Planlayın

    named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of ser

    YüksekCVSS 7,5İstismar yokEPSS %38

    isc · bind2 Kas 2016

  • CVE-2018-12543
    41Planlayın

    In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that has a topic starting with $, but that is n

    YüksekCVSS 7,5İstismar yokEPSS %36

    eclipse · mosquitto15 Kas 2018

  • CVE-2019-9795
    40Planlayın

    A vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could potentially be used by malicious JavaScript to trigg

    KritikCVSS 9,8İstismar yokEPSS %1

    mozilla · firefox26 Nis 2019

  • CVE-2020-3615
    39İzleyin

    Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disassoc frames due to im

    KritikCVSS 9,8İstismar yokEPSS %0

    qualcomm · apq8009 firmware2 Haz 2020

  • CVE-2022-3488
    36İzleyin

    named may terminate unexpectedly when processing ECS options in repeated responses to iterative queries

    YüksekCVSS 7,5İstismar yokEPSS %19

    isc · bind26 Oca 2023

  • CVE-2020-12417
    36İzleyin

    Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a po

    YüksekCVSS 8,8İstismar yokEPSS %2

    mozilla · firefox9 Tem 2020

  • CVE-2026-102070
    36İzleyin

    Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used

    KritikCVSS 9,2İstismar yokEPSS %0

    juniper networks · junos os14 Eki 2026

  • CVE-2026-41584
    36İzleyin

    ZEBRA: rk Identity Point Panic in Transaction Verification

    KritikCVSS 9,2İstismar yokEPSS %0

    zfnd · zebra-chain8 May 2026

  • CVE-2022-3924
    35İzleyin

    named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota

    YüksekCVSS 7,5İstismar yokEPSS %15

    isc · bind26 Oca 2023

  • CVE-2026-94450
    35İzleyin

    Potential denial of service when configured to send Retry packets in s2n-quic

    YüksekCVSS 8,7İstismar yokEPSS %1

    aws · s2n-quic22 Eyl 2026

  • CVE-2020-6623
    35İzleyin

    stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.

    YüksekCVSS 8,8İstismar yokEPSS %1

    nothings · stb truetype.h8 Oca 2020

  • CVE-2020-6617
    35İzleyin

    stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.

    YüksekCVSS 8,8İstismar yokEPSS %1

    nothings · stb truetype.h8 Oca 2020

  • CVE-2020-6619
    35İzleyin

    stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.

    YüksekCVSS 8,8İstismar yokEPSS %1

    nothings · stb truetype.h8 Oca 2020

  • CVE-2026-31739
    35İzleyin

    crypto: tegra - Add missing CRYPTO_ALG_ASYNC

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux kernel1 May 2026

  • CVE-2026-52952
    35İzleyin

    iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset

    YüksekCVSS 8,8İstismar yokEPSS %0

    linux · linux kernel24 Haz 2026

  • CVE-2017-7478
    34İzleyin

    OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet.

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    openvpn · openvpn15 May 2017

  • CVE-2020-36230
    34İzleyin

    A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_elemen

    YüksekCVSS 7,5İstismar yokEPSS %12

    openldap · openldap26 Oca 2021

  • CVE-2006-4095
    34İzleyin

    BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which c

    YüksekCVSS 7,5İstismar yokEPSS %11

    isc · bind5 Eyl 2006

  • CVE-2021-25215
    34İzleyin

    An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself

    YüksekCVSS 7,5İstismar yokEPSS %11

    debian · debian linux28 Nis 2021

  • CVE-2023-37020
    34İzleyin

    Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface.

    YüksekCVSS 8,6İstismar yokEPSS %0

    open5gs · open5gs22 Oca 2025

Tüm zafiyet sınıfları