Vulnerabilities > Reachable Assertion

DATE CVE VULNERABILITY TITLE RISK
2017-06-07 CVE-2017-9500 Reachable Assertion vulnerability in Imagemagick 7.0.58
In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of service via a crafted file.
network
low complexity
imagemagick CWE-617
6.5
2017-06-07 CVE-2017-9499 Reachable Assertion vulnerability in Imagemagick 7.0.57
In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function SetPixelChannelAttributes, which allows attackers to cause a denial of service via a crafted file.
network
low complexity
imagemagick CWE-617
6.5
2017-05-23 CVE-2017-8915 Reachable Assertion vulnerability in SAP Hana XS 1.00/2.00
sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to cause a denial of service (assertion failure and service crash) by pushing a package with a filename containing a $ (dollar sign) or % (percent) character, aka SAP Security Note 2407694.
network
low complexity
sap CWE-617
7.5
2017-05-22 CVE-2017-9142 Reachable Assertion vulnerability in multiple products
In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c.
network
low complexity
imagemagick debian CWE-617
6.5
2017-05-22 CVE-2017-9141 Reachable Assertion vulnerability in multiple products
In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function in MagickCore/profile.c because of missing checks in the ReadDDSImage function in coders/dds.c.
network
low complexity
imagemagick debian CWE-617
6.5
2017-05-15 CVE-2017-7479 Reachable Assertion vulnerability in Openvpn
OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Service of server by authenticated attacker.
network
low complexity
openvpn CWE-617
6.5
2017-05-01 CVE-2017-8372 Reachable Assertion vulnerability in Underbit MAD Libmad 0.15.1B
The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted audio file.
local
high complexity
underbit CWE-617
4.7
2017-04-09 CVE-2017-7605 Reachable Assertion vulnerability in Libaacplus Project Libaacplus 2.0.2
aacplusenc.c in HE-AAC+ Codec (aka libaacplus) 2.0.2 has an assertion failure, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file.
local
low complexity
libaacplus-project CWE-617
7.8
2017-03-23 CVE-2016-9399 Reachable Assertion vulnerability in multiple products
The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
network
low complexity
jasper-project fedoraproject opensuse CWE-617
7.5
2017-03-23 CVE-2016-9398 Reachable Assertion vulnerability in multiple products
The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.
7.5