Reachable Assertion

Every one of the 897 is a mark on the map. Named now: 1 to 26, most at risk first.

1. named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.CVE-2015-5477ISC · CVSS 7.5 · 100% likelycovered by CyberSIXT

   ISCFlax Typhoon5 articles

2. A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.cCVE-2020-8617ISC · CVSS 7.5 · 93% likely

   ISC

3. A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.CVE-2020-3622277% likely
4. OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an assertion failure.CVE-2006-577977% likely
5. In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a deni…CVE-2021-2721266% likely
6. A flaw in the "deny-answer-aliases" feature can cause an assertion failure in namedCVE-2018-5740ISC · CVSS 7.5 · 60% likely

   ISC

7. named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit…CVE-2016-886439% likely
8. In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that has a topic starting with $, but that is not $SYS, e.g. $test/test, then an asser…CVE-2018-12543The Eclipse Foundation · 36% likely

   Eclipse Foundation

9. named may terminate unexpectedly when processing ECS options in repeated responses to iterative queriesCVE-2022-3488ISC · CVSS 7.5 · 19% likely

   ISC

10. An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone i…CVE-2018-573618% likely
11. named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quotaCVE-2022-3924ISC · CVSS 7.5 · 16% likely

    ISC

12. OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed in 2.3.15 and 2.4.2.CVE-2017-7478OpenVPN Technologies, Inc · 14% likely

    OpenVPN

13. A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.CVE-2020-3623012% likely
14. BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple…CVE-2006-409512% likely
15. An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itselfCVE-2021-25215ISC · CVSS 7.5 · 12% likely

    ISC

16. An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"CVE-2017-3136ISC · CVSS 5.9 · 11% likely

    ISC

17. Polipo before 1.0.4.1 suffers from a DoD vulnerability via specially-crafted HTTP POST / PUT request.CVE-2011-3596polipo · 11% likely
18. BIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.CVE-2018-5737ISC · CVSS 5.9 · 11% likely

    ISC

19. KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to an Internet Relay Chat (IRC) server, which causes an asserti…CVE-2006-681111% likely
20. Denial of Service in Helper Process managementCVE-2023-49286squid-cache · CVSS 8.6 · 10% likely

    Squid-Cache

21. Malformed BRID/HHIT records can cause named to terminate unexpectedlyCVE-2025-13878ISC · CVSS 7.5 · 9.4% likely

    ISC

22. A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAMECVE-2017-3137ISC · CVSS 7.5 · 8.9% likely

    ISC

23. oftpd before 0.3.7 allows remote attackers to cause a denial of service (daemon abort) via a (1) LPRT or (2) LPASV command with an unsupported address family, which triggers an as…CVE-2006-67676.9% likely
24. A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.cCVE-2020-8623ISC · CVSS 7.5 · 6.6% likely

    ISC

25. A malformed request can trigger an assertion failure in badcache.cCVE-2018-5734ISC · CVSS 7.5 · 6.4% likely

    ISC

26. A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedlyCVE-2021-25214ISC · CVSS 6.5 · 6.4% likely

    ISC

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.