Vulnerabilities > Reachable Assertion

DATE CVE VULNERABILITY TITLE RISK
2023-01-26 CVE-2022-3924 Reachable Assertion vulnerability in ISC Bind
This issue can affect BIND 9 resolvers with `stale-answer-enable yes;` that also make use of the option `stale-answer-client-timeout`, configured with a value greater than zero. If the resolver receives many queries that require recursion, there will be a corresponding increase in the number of clients that are waiting for recursion to complete.
network
low complexity
isc CWE-617
7.5
2023-01-26 CVE-2022-3488 Reachable Assertion vulnerability in ISC Bind
Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure. 'Broken' in this context is anything that would cause the resolver to reject the query response, such as a mismatch between query and answer name. This issue affects BIND 9 versions 9.11.4-S1 through 9.11.37-S1 and 9.16.8-S1 through 9.16.36-S1.
network
low complexity
isc CWE-617
7.5
2022-12-28 CVE-2020-36562 Reachable Assertion vulnerability in DHT Project DHT
Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector.
network
low complexity
dht-project CWE-617
7.5
2022-12-18 CVE-2022-47516 Reachable Assertion vulnerability in Drachtio Drachtio-Server
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20.
network
low complexity
drachtio CWE-617
7.5
2022-12-13 CVE-2022-25672 Reachable Assertion vulnerability in Qualcomm products
Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile
network
low complexity
qualcomm CWE-617
7.5
2022-12-13 CVE-2022-25673 Reachable Assertion vulnerability in Qualcomm products
Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile
network
low complexity
qualcomm CWE-617
7.5
2022-12-13 CVE-2022-25675 Reachable Assertion vulnerability in Qualcomm products
Denial of service due to reachable assertion in modem while processing filter rule from application client in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile
local
low complexity
qualcomm CWE-617
5.5
2022-12-13 CVE-2022-25689 Reachable Assertion vulnerability in Qualcomm products
Denial of service in Modem due to reachable assertion in Snapdragon Mobile
network
low complexity
qualcomm CWE-617
7.5
2022-12-13 CVE-2022-25691 Reachable Assertion vulnerability in Qualcomm products
Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile
network
low complexity
qualcomm CWE-617
7.5
2022-12-13 CVE-2022-25692 Reachable Assertion vulnerability in Qualcomm products
Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
network
low complexity
qualcomm CWE-617
7.5