Fedora: Security Advisory for php-wikimedia-assert (FEDORA-2022-ea159a2ec4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FFmpeg Buffer Overflow DoS

The vulnerability in the src/libavutil/mathematics.c file of the FFmpeg multimedia library is related to the insufficient use of the assert function. Exploiting this vulnerability allows a remote attacker to cause a service failure...

LibTIFF Heap Buffer Overflow DoS

The vulnerability of the LibTIFF library is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created TIFF file...

dict0dict.cc Component DoS

The vulnerability of the dict0dict.cc component in the MariaDB database management system is related to the use of the assert function or similar operators. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

DNS-server BIND DoS

The vulnerability of the DNS-server BIND daemon is related to the use of the assert function or similar operators. Exploiting this vulnerability allows a remote attacker to cause a service failure...

CVE-2022-38150

In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1...

CVE-2022-38150

CVE-2022-38150 affects Varnish Cache 7.0.0–7.0.2 and 7.1.0. A crafted reason phrase in the backend response can cause the Varnish server to assert and automatically restart. The issue is mitigated by upgrading to Varnish 7.0.3 or 7.1.1, which include the fix. Several open-source advisories (openS...

Garbage Collector DoS

The vulnerability of the Garbage Collector component in Firefox browsers is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Gopher Network Protocol DoS

The vulnerability of the Gopher network protocol implementation in Squid proxies relates to the use of the assert function or similar operators. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending a specially crafted response to the proxy server...

CVE-2022-29228

A flaw was found in Envoy. The OAuth filter would try to invoke the remaining filters in the chain after emitting a local response, which triggers an ASSERT in newer versions and corrupts memory on earlier versions...

Design/Logic Flaw

Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter would try to invoke the remaining filters in the chain after emitting a local response, which triggers an ASSERT in newer versions and corrupts memory on earlier versions. continueDecoding shouldn’t eve...

PT-2022-3597

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 101 Description The issue is related to the Garbage Collector component in Firefox browsers. It is associated with the use of the assert function or similar operators. If array shift operations are not utilized, the...

Qualcomm Embedded Software Assert DoS

The vulnerability of embedded software developed for Qualcomm chips lies in the use of the assert function or similar operators. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Polipo proxy server Heap Buffer Overflow DoS

The vulnerability of the Polipo proxy server is related to the lack of use of the assert function. Exploiting this vulnerability allows a remote attacker to cause a service failure...

BIND DNS DoS

The vulnerability of the BIND DNS server component is related to the lack of use of the assert function. Exploiting this vulnerability allows a remote attacker to cause service failures...

Exiv2 Heap Buffer Overflow DoS

The vulnerability of the Exiv2 metadata management library is related to the insufficient use of the assert function. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially created image file...

OpenLDAP slapd DoS

The vulnerability of the slapd server in the LDAP OpenLDAP implementation is related to the insufficient use of the assert function. Exploiting this vulnerability allows a malicious actor to cause service failures using a malicious package...

OpenLDAP csnNormalize23 Heap Buffer Overflow DoS

The vulnerability of the csnNormalize23 function in the LDAP OpenLDAP implementation is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures using a malicious package...

CVE-2021-46054

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrowwasm::Rethrow...

OpenLDAP DoS

The vulnerability of the open implementation of the OpenLDAP protocol is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted package with a short timestamp...