CWE-617 · Denial of Service
Reachable Assertion
897CVEs
1exploited
0with a public check
19likely (EPSS 10%+)
SortMost likely exploited
897 CVEs with CWE-617 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2015-5477In CISA KEVExploitednamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.ISC · BIND · CVSS 7.5 · 2015-07-29 | 7.5 | 100% | 2015-07-29 |
| CVE-2020-8617A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.cISC · BIND9 · CVSS 7.5 · 2020-05-19 | 7.5 | 93% | 2020-05-19 |
| CVE-2020-36222A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.Openldap · Openldap · 2021-01-25 | – | 77% | 2021-01-25 |
| CVE-2006-5779OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an assertion failure.Openldap · Openldap · 2006-11-07 | – | 77% | 2006-11-07 |
| CVE-2021-27212In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a deni…Openldap · Openldap · 2021-02-14 | – | 66% | 2021-02-14 |
| CVE-2018-5740A flaw in the "deny-answer-aliases" feature can cause an assertion failure in namedISC · BIND 9 · CVSS 7.5 · 2019-01-16 | 7.5 | 60% | 2019-01-16 |
| CVE-2016-8864named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit…Isc · Bind · 2016-11-02 | – | 39% | 2016-11-02 |
| CVE-2018-12543In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that has a topic starting with $, but that is not $SYS, e.g. $test/test, then an asser…The Eclipse Foundation · Eclipse Mosquitto · 2018-11-15 | – | 36% | 2018-11-15 |
| CVE-2022-3488named may terminate unexpectedly when processing ECS options in repeated responses to iterative queriesISC · BIND 9 · CVSS 7.5 · 2023-01-25 | 7.5 | 19% | 2023-01-25 |
| CVE-2018-5736An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone i…Isc · Bind · 2019-01-16 | – | 18% | 2019-01-16 |
| CVE-2022-3924named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quotaISC · BIND 9 · CVSS 7.5 · 2023-01-25 | 7.5 | 16% | 2023-01-25 |
| CVE-2017-7478OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed in 2.3.15 and 2.4.2.OpenVPN Technologies, Inc · openvpn · 2017-05-15 | – | 14% | 2017-05-15 |
| CVE-2020-36230A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.Openldap · Openldap · 2021-01-25 | – | 12% | 2021-01-25 |
| CVE-2006-4095BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple…Isc · Bind · 2006-09-06 | – | 12% | 2006-09-06 |
| CVE-2021-25215An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itselfISC · BIND9 · CVSS 7.5 · 2021-04-29 | 7.5 | 12% | 2021-04-29 |
| CVE-2017-3136An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"ISC · BIND 9 · CVSS 5.9 · 2019-01-16 | 5.9 | 11% | 2019-01-16 |
| CVE-2011-3596Polipo before 1.0.4.1 suffers from a DoD vulnerability via specially-crafted HTTP POST / PUT request.polipo · polipo · 2019-11-25 | – | 11% | 2019-11-25 |
| CVE-2018-5737BIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.ISC · BIND 9 · CVSS 5.9 · 2019-01-16 | 5.9 | 11% | 2019-01-16 |
| CVE-2006-6811KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to an Internet Relay Chat (IRC) server, which causes an asserti…Kde · Ksirc · 2006-12-29 | – | 11% | 2006-12-29 |
| CVE-2023-49286Denial of Service in Helper Process managementsquid-cache · squid · CVSS 8.6 · 2023-12-04 | 8.6 | 10% | 2023-12-04 |
| CVE-2025-13878Malformed BRID/HHIT records can cause named to terminate unexpectedlyISC · BIND 9 · CVSS 7.5 · 2026-01-21 | 7.5 | 9.4% | 2026-01-21 |
| CVE-2017-3137A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAMEISC · BIND 9 · CVSS 7.5 · 2019-01-16 | 7.5 | 8.9% | 2019-01-16 |
| CVE-2006-6767oftpd before 0.3.7 allows remote attackers to cause a denial of service (daemon abort) via a (1) LPRT or (2) LPASV command with an unsupported address family, which triggers an as…Time-Travellers · Oftpd · 2007-01-16 | – | 6.9% | 2007-01-16 |
| CVE-2020-8623A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.cISC · BIND9 · CVSS 7.5 · 2020-08-21 | 7.5 | 6.6% | 2020-08-21 |
| CVE-2018-5734A malformed request can trigger an assertion failure in badcache.cISC · BIND 9 · CVSS 7.5 · 2019-01-16 | 7.5 | 6.4% | 2019-01-16 |
| CVE-2021-25214A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedlyISC · BIND9 · CVSS 6.5 · 2021-04-29 | 6.5 | 6.4% | 2021-04-29 |
| CVE-2022-1183Destroying a TLS session early causes assertion failureISC · BIND9 · CVSS 7.5 · 2022-05-19 | 7.5 | 6.2% | 2022-05-19 |
| CVE-2023-2156A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data…Linux · Linux kernel (RPL protocol) · 2023-05-09 | – | 6.2% | 2023-05-09 |
| CVE-2016-9398The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.Jasper Project · Jasper · 2017-03-23 | – | 6.0% | 2017-03-23 |
| CVE-2020-8622A truncated TSIG response can lead to an assertion failureISC · BIND9 · CVSS 6.5 · 2020-08-21 | 6.5 | 5.9% | 2020-08-21 |
| CVE-2019-15892An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending cra…Varnish-Software · Varnish Cache · 2019-09-03 | – | 5.9% | 2019-09-03 |
| CVE-2019-10894In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissecto…Wireshark · Wireshark · 2019-04-09 | – | 5.6% | 2019-04-09 |
| CVE-2019-6467An error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion failure in query.cISC · BIND 9 · CVSS 5.9 · 2019-10-09 | 5.9 | 5.6% | 2019-10-09 |
| CVE-2017-3138named exits with a REQUIRE assertion failure if it receives a null command string on its control channelISC · BIND 9 · CVSS 6.5 · 2019-01-16 | 6.5 | 5.5% | 2019-01-16 |
| CVE-2017-7539An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where the I/O coroutine was undefined. This c…QEMU · Qemu · CVSS 5.3 · 2018-07-26 | 5.3 | 5.5% | 2018-07-26 |
| CVE-2021-46784In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.Squid-Cache · Squid · 2022-07-17 | – | 5.1% | 2022-07-17 |
| CVE-2017-7508OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet.OpenVPN Technologies, Inc · OpenVPN · 2017-06-27 | – | 4.8% | 2017-06-27 |
| CVE-2017-13746There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of service attack.Jasper Project · Jasper · 2017-08-29 | – | 4.0% | 2017-08-29 |
| CVE-2017-13745There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an u…Jasper Project · Jasper · 2017-08-29 | – | 3.9% | 2017-08-29 |
| CVE-2016-9397The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.Jasper Project · Jasper · 2017-03-23 | – | 3.9% | 2017-03-23 |
| CVE-2020-8620In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the asserti…ISC · BIND9 · CVSS 7.5 · 2020-08-21 | 7.5 | 3.9% | 2020-08-21 |
| CVE-2021-3326The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the cod…Gnu · Glibc · CVSS 7.5 · 2021-01-27 | 7.5 | 3.8% | 2021-01-27 |
| CVE-2016-9399The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors.Jasper Project · Jasper · 2017-03-23 | – | 3.8% | 2017-03-23 |
| CVE-2017-13750There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that will lead to a remote denial of service attack.Jasper Project · Jasper · 2017-08-29 | – | 3.7% | 2017-08-29 |
| CVE-2021-25218A too-strict assertion check could be triggered when responses in BIND 9.16.19 and 9.17.16 require UDP fragmentation if RRL is in useISC · BIND9 · CVSS 7.5 · 2021-08-18 | 7.5 | 3.7% | 2021-08-18 |
| CVE-2018-10963The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service (assertion failure and application crash) via…Libtiff · Libtiff · 2018-05-10 | – | 3.6% | 2018-05-10 |
| CVE-2017-13752There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack.Jasper Project · Jasper · 2017-08-29 | – | 3.6% | 2017-08-29 |
| CVE-2017-13751There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack.Jasper Project · Jasper · 2017-08-29 | – | 3.6% | 2017-08-29 |
| CVE-2017-13749There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will lead to a remote denial of service attack.Jasper Project · Jasper · 2017-08-29 | – | 3.6% | 2017-08-29 |
| CVE-2017-13747There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12 that will lead to a remote denial of service attack.Jasper Project · Jasper · 2017-08-29 | – | 3.6% | 2017-08-29 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.