Vulnerabilities > Reachable Assertion

DATE CVE VULNERABILITY TITLE RISK
2017-06-27 CVE-2017-7508 Reachable Assertion vulnerability in Openvpn
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet.
network
low complexity
openvpn CWE-617
5.0
2017-06-09 CVE-2017-0376 Reachable Assertion vulnerability in multiple products
The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_cell function via a BEGIN_DIR cell on a rendezvous circuit.
network
low complexity
torproject debian CWE-617
5.0
2017-06-09 CVE-2017-0375 Reachable Assertion vulnerability in Torproject TOR
The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the relay_send_end_cell_from_edge_ function via a malformed BEGIN cell.
network
low complexity
torproject CWE-617
5.0
2017-06-07 CVE-2017-9501 Reachable Assertion vulnerability in Imagemagick 7.0.57
In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file.
4.3
2017-06-07 CVE-2017-9500 Reachable Assertion vulnerability in Imagemagick 7.0.58
In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of service via a crafted file.
4.3
2017-06-07 CVE-2017-9499 Reachable Assertion vulnerability in Imagemagick 7.0.57
In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function SetPixelChannelAttributes, which allows attackers to cause a denial of service via a crafted file.
4.3
2017-05-23 CVE-2017-8915 Reachable Assertion vulnerability in SAP Hana XS 1.00/2.00
sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to cause a denial of service (assertion failure and service crash) by pushing a package with a filename containing a $ (dollar sign) or % (percent) character, aka SAP Security Note 2407694.
network
low complexity
sap CWE-617
5.0
2017-05-22 CVE-2017-9142 Reachable Assertion vulnerability in multiple products
In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c.
4.3
2017-05-22 CVE-2017-9141 Reachable Assertion vulnerability in multiple products
In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function in MagickCore/profile.c because of missing checks in the ReadDDSImage function in coders/dds.c.
4.3
2017-05-15 CVE-2017-7479 Reachable Assertion vulnerability in Openvpn
OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Service of server by authenticated attacker.
network
low complexity
openvpn CWE-617
4.0