Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

CVEs (928)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-8864 4Debian IscNetapp+1 more 11Bind Data Ontap EdgeDebian Linux+8 more May 6, 2026 Nov 2, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer sectio...Show more named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.Show less
CVE-2015-5477 13Apple CanonicalDebian+10 more 21Bind Clustered Data OntapDebian Linux+18 more Oct 9, 2026 Jul 29, 2015 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
CVE-2010-3411 1Google 1Chrome Apr 29, 2026 Sep 16, 2010 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Google Chrome before 6.0.472.59 on Linux does not properly handle cursors, which might allow attackers to cause a denial of service (assertion failure) via unspecified vectors.
CVE-2006-6767 1Time Travellers 1Oftpd Apr 23, 2026 Jan 16, 2007 N/A· v4 7.5 HIGH· v3 9.4 HIGH· v2 oftpd before 0.3.7 allows remote attackers to cause a denial of service (daemon abort) via a (1) LPRT or (2) LPASV command with an unsupported address family, which triggers an assertion failure.
CVE-2006-6811 2Canonical Kde 2Ksirc Ubuntu Linux Apr 23, 2026 Dec 29, 2006 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to an Internet Relay Chat (IRC) server, which causes an assertion failure and results in a NULL pointer...Show more KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to an Internet Relay Chat (IRC) server, which causes an assertion failure and results in a NULL pointer dereference. NOTE: this issue was originally reported as a buffer overflow.Show less
CVE-2006-5779 2Canonical Openldap 2Openldap Ubuntu Linux Apr 23, 2026 Nov 7, 2006 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an assertion failure.
CVE-2006-4574 1Wireshark 1Wireshark Apr 23, 2026 Oct 28, 2006 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger an assertion error rel...Show more Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger an assertion error related to unexpected length values.Show less
CVE-2006-4095 3Apple CanonicalIsc 4Bind Mac Os XMac Os X Server+1 more Apr 16, 2026 Sep 6, 2006 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple RRsets are returned.

Previous 1...43 44 45 4647