4976 matches found
CVE-2022-1183 Destroying a TLS session early causes assertion failure
On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-on statements in their named.conf. TLS is used by both DNS over TLS DoT and DNS over HTTPS DoH, bu...
CVE-2022-1183
CVE-2022-1183 describes an assertion-failure termination in the named daemon on vulnerable BIND configurations that reference http in listen-on statements. Affected are BIND 9.18.0–9.18.2 and BIND 9.19.0 (development branch); configurations using DoT are unaffected, while DoT/DoH deployments may ...
CVE-2022-1183: Reachable Assertion
On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-on statements in their named.conf. TLS is used by both DNS over TLS DoT and DNS over HTTPS DoH, bu...
ISC BIND 9.18.0 < 9.18.3 Assertion Failure (cve-2022-1183)
The version of ISC BIND installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cve-2022-1183 advisory. - An assertion failure can be triggered if a TLS connection to a configured http TLS listener with a defined endpoint is...
CVE-2022-1183
On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-on statements in their named.conf. TLS is used by both DNS over TLS DoT and DNS over HTTPS DoH, bu...
libsixel img2sixel Denial of Service Vulnerability (CNVD-2022-77874)
libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. libsixel img2sixel version 1.8.6 is vulnerable to a denial-of-service vulnerability, which stems from an assertion failure error in stbijpeghuffdecode, stbimage.h:1894 . A...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS via an assertion failure in the stbijpeghuffdecode function, due to a crafted JPEG file. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...
CVE-2022-29977
There is an assertion failure error in stbijpeghuffdecode, stbimage.h:1894 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file...
Authentication flaw
There is an assertion failure error in stbijpeghuffdecode, stbimage.h:1894 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file...
CVE-2022-29977
There is an assertion failure error in stbijpeghuffdecode, stbimage.h:1894 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file...
CVE-2022-29977
CVE-2022-29977 affects libsixel img2sixel 1.8.6. The vulnerability is an assertion failure in stbi__jpeg_huff_decode (stb_image.h:1894) that enables remote-denial-of-service via a crafted JPEG file. The provided documents do not specify patched versions or remediation steps.
CVE-2022-29977: Reachable Assertion
There is an assertion failure error in stbijpeghuffdecode, stbimage.h:1894 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file...
PT-2022-19939
Name of the Vulnerable Software and Affected Versions libsixel img2sixel version 1.8.6 Description The issue is related to an assertion failure error in stbi jpeg huff decode at stb image.h:1894. This error can be triggered by remote attackers using a crafted JPEG file, potentially causing a...
NewStart CGSL MAIN 6.02 : unbound Multiple Vulnerabilities (NS-SA-2022-0064)
The remote NewStart CGSL host, running version MAIN 6.02, has unbound packages installed that are affected by multiple vulnerabilities: - DISPUTED Unbound before 1.9.5 allows an integer overflow in the regional allocator via regionalalloc. NOTE: The vendor disputes that this is a vulnerability...
UBUNTU-CVE-2022-29339
In GPAC 2.1-DEV-rev87-g053aae8-master, function BSReadByte in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2...
CVE-2022-29339
CVE-2022-29339 affects GPAC 2.1-DEV-rev87-g053aae8-master; the Denial of Service is caused by a failed assertion in BS_ReadByte() within utils/bitstream.c. The vulnerability is mitigated by the fix introduced in commit 9ea93a2 (upstream GPAC). Exploitation details beyond this are not provided in ...
GPAC security vulnerabilities
GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.1-DEV-rev87-g053aae8-master, which originates from an assertion failure of the function BSReadByte in utils/bitstream.c. The vulnerability can be exploited to implement a denial-of-service attack. An...
There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc.
...
CVE-2022-24272: Reachable Assertion
An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6...
