CVE-2022-24938

A malformed packet causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset, immediately clearing the error...

Stack overflow

A malformed packet causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset, immediately clearing the error...

CVE-2022-24938

CVE-2022-24938 affects the Ember ZNet stack (as used in Silicon Labs Gecko SDK). A malformed Zigbee/ZW packet can trigger a stack overflow in Ember ZNet, causing an assertion failure and a reset that immediately clears the error. Some sources specify Ember ZNet versions 7.0.1 or earlier. The prov...

PT-2022-16998 · Unknown · Ember Znet Stack

Name of the Vulnerable Software and Affected Versions: Ember ZNet stack affected versions not specified Description: A malformed packet causes a stack overflow in the Ember ZNet stack, leading to an assert and a subsequent reset, which immediately clears the error. Recommendations: At the moment,...

Fedora: Security Advisory for php-wikimedia-assert (FEDORA-2022-ea159a2ec4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability in the `src/libavutil/mathematics.c` component of the FFmpeg multimedia library allows a attacker to cause a service failure.

The vulnerability in the src/libavutil/mathematics.c file of the FFmpeg multimedia library is related to the insufficient use of the assert function. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the LibTIFF library, related to the lack of use of the assert() function, allows a attacker to trigger a service failure.

The vulnerability of the LibTIFF library is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created TIFF file...

The vulnerability of the dict0dict.cc component of the MariaDB database management system allows a attacker to cause a service failure.

The vulnerability of the dict0dict.cc component in the MariaDB database management system is related to the use of the assert function or similar operators. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the DNS-server BIND daemon, which allows a hacker to cause a service failure.

The vulnerability of the DNS-server BIND daemon is related to the use of the assert function or similar operators. Exploiting this vulnerability allows a remote attacker to cause a service failure...

CVE-2022-38150

In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1...

CVE-2022-38150

CVE-2022-38150 affects Varnish Cache 7.0.0–7.0.2 and 7.1.0. A crafted reason phrase in the backend response can cause the Varnish server to assert and automatically restart. The issue is mitigated by upgrading to Varnish 7.0.3 or 7.1.1, which include the fix. Several open-source advisories (openS...

The vulnerability of the Garbage Collector component in Firefox browsers allows a hacker to trigger a service failure.

The vulnerability of the Garbage Collector component in Firefox browsers is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Gopher network protocol implementation in Squid proxy servers allows attackers to induce service failures.

The vulnerability of the Gopher network protocol implementation in Squid proxies relates to the use of the assert function or similar operators. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending a specially crafted response to the proxy server...

CVE-2022-29228

A flaw was found in Envoy. The OAuth filter would try to invoke the remaining filters in the chain after emitting a local response, which triggers an ASSERT in newer versions and corrupts memory on earlier versions...

Design/Logic Flaw

Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter would try to invoke the remaining filters in the chain after emitting a local response, which triggers an ASSERT in newer versions and corrupts memory on earlier versions. continueDecoding shouldn’t eve...

The vulnerability of embedded software developed by Qualcomm, related to the use of the assert() function or similar operators, allows attackers to trigger a service failure.

The vulnerability of embedded software developed for Qualcomm chips lies in the use of the assert function or similar operators. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Polipo proxy server, related to the lack of use of the assert() function, allows a hacker to trigger a service failure.

The vulnerability of the Polipo proxy server is related to the lack of use of the assert function. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the BIND DNS server component, which allows a perpetrator to cause a service failure

The vulnerability of the BIND DNS server component is related to the lack of use of the assert function. Exploiting this vulnerability allows a remote attacker to cause service failures...

The vulnerability of the Exiv2 metadata management library, related to the lack of use of the assert() function, allows a attacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library is related to the insufficient use of the assert function. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially created image file...

The vulnerability of the slapd server in the LDAP protocol OpenLDAP implementation, related to the lack of use of the assert() function, allows a attacker to cause a service failure.

The vulnerability of the slapd server in the LDAP OpenLDAP implementation is related to the insufficient use of the assert function. Exploiting this vulnerability allows a malicious actor to cause service failures using a malicious package...