722 matches found
MAL-2025-19798 Malicious code in error-sun-eta-assert-error (npm)
The package error-sun-eta-assert-error was found to contain malicious code...
MAL-2025-39767 Malicious code in xi-shell-zeta-assert-encode (npm)
The package xi-shell-zeta-assert-encode was found to contain malicious code...
MAL-2025-14985 Malicious code in async-boolean-emulate-assert-gamma (npm)
The package async-boolean-emulate-assert-gamma was found to contain malicious code...
MAL-2025-14988 Malicious code in async-deserialize-xi-assert-shell (npm)
The package async-deserialize-xi-assert-shell was found to contain malicious code...
MAL-2025-14939 Malicious code in assert-new-compress-mu-key (npm)
The package assert-new-compress-mu-key was found to contain malicious code...
Malicious code in error-sun-eta-assert-error (npm)
The package error-sun-eta-assert-error was found to contain malicious code...
MAL-2025-22252 Malicious code in hash-query-string-assert-catch (npm)
The package hash-query-string-assert-catch was found to contain malicious code...
MAL-2025-18293 Malicious code in deploy-assert-debug-short-reject (npm)
The package deploy-assert-debug-short-reject was found to contain malicious code...
MAL-2025-22664 Malicious code in hot-air-thread-minify-assert (npm)
The package hot-air-thread-minify-assert was found to contain malicious code...
CVE-2025-1394
The Ember ZNet stack’s packet buffer manager may read out of bound memory leading to an assert, causing a Denial of Service DoS...
RockyLinux 8 : glibc (RLSA-2025:3828)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:3828 advisory. glibc: buffer overflow in the GNU C Library's assert CVE-2025-0395 Tenable has extracted the preceding description block directly from the RockyLinux security...
CVE-2025-38461
In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport TOCTOU Transport assignment may race with module unload. Protect newtransport from becoming a stale pointer. This also takes care of an insecure call in vsockuselocaltransport; add a lockdep assert. BUG: unab...
UBUNTU-CVE-2025-38461
In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport TOCTOU Transport assignment may race with module unload. Protect newtransport from becoming a stale pointer. This also takes care of an insecure call in vsockuselocaltransport; add a lockdep assert. BUG: unab...
The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.
The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the use of the assert function. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the mod_proxy_http2 function in the Apache HTTP Server allows a hacker to cause a service failure.
The vulnerability of the modproxyhttp2 function in the Apache HTTP Server is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release
...
When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.
...
CVE-2025-38287
CVE-2025-38287 affects the Linux kernel InfiniBand subsystem (IB_cm). The issue occurs when freeing old cm_priv_msg via cm_free_priv_msg() after cm_id has advanced, where a lock held assertion and WARN triggers due to reuse of the cm_id lock. This could allow a local attacker to trigger a denial ...
CVE-2025-38287 IB/cm: Drop lockdep assert and WARN when freeing old msg
In the Linux kernel, the following vulnerability has been resolved: IB/cm: Drop lockdep assert and WARN when freeing old msg The send completion handler can run after cmid has advanced to another message. The cmid lock is not needed in this case, but a recent change re-used cmfreeprivmsg, which...
GNU Glibc Vulnerable to Memory Corruption via Heap Buffer Overflow during 'assert()' Failure (CVE-2025-0395)
GNU Glibc contains a memory corruption vulnerability that overflows the heap buffer by one or several bytes. The corruption occurs when the assert function fails under specific conditions. Heap buffer overflows are known to result in severe damage to the program's confidentiality, integrity, and...