ISC BIND security vulnerability

ISC BIND is a suite of open source software that implements the DNS protocol from the US company ISC. A security vulnerability exists in ISC BIND that stems from the fact that when synth-from-dnssec is enabled the default setting, lookups involving a DNAME may trigger an assertion failure. The...

UBUNTU-CVE-2022-0635

Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a failed assertion check...

PT-2022-5559 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions prior to 10.9 Description: The issue is related to an assertion failure in the MariaDB Server, specifically in the /row/row0mysql.cc component. This failure can be triggered via the condition node-pcur-rel pos == BTR...

CVE-2022-0865

A reachable assertion failure was found in libtiff's JBIG functionality. This flaw allows an attacker who can submit a crafted file to an application linked with libtiff and using the JBIG functionality, causes a crash via an assertion failure, leading to a denial of service. The exact mechanism...

PT-2025-31761

Name of the Vulnerable Software and Affected Versions iperf versions prior to 3.19.1 Description The software contains a flaw in iperf auth.c where a malformed authentication attempt causes a Base64Decode assertion failure, leading to application termination. Recommendations Update to version...

Security Bulletin: Vulnerability in ISC BIND affects IBM Integrated Analytics System.

Summary ISC BIND used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVECVE-2021-25214 , CVE-2021-25215 . Vulnerability Details CVEID: CVE-2021-25214 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by a broken inbound incrementa...

CVE-2021-45861

There is an Assertion num = INTBIT' failed at BitStreamReader::skipBits in /bitStream.h:132 of tsMuxer git-c6a0277...

Authentication flaw

There is an Assertion num = INTBIT' failed at BitStreamReader::skipBits in /bitStream.h:132 of tsMuxer git-c6a0277...

Daniel Kamil Kozar tsMuxer security vulnerability

Daniel Kamil Kozar tsMuxer is an open source application by Daniel Kamil Kozar. Transport stream mixer for remixing/mixing elementary streams. A security vulnerability exists in the tsMuxer git-c6a0277 version, which stems from an assertion failure in BitStreamReader::skipBits in /bitStream.h:132...

CVE-2021-45861

There is an Assertion num = INTBIT' failed at BitStreamReader::skipBits in /bitStream.h:132 of tsMuxer git-c6a0277...

CVE-2021-45861

There is an Assertion num = INTBIT' failed at BitStreamReader::skipBits in /bitStream.h:132 of tsMuxer git-c6a0277...

CVE-2021-45861

CVE-2021-45861 affects the tsMuxer project (git-c6a0277). The issue is an assertion failure: num

PT-2022-12441

Name of the Vulnerable Software and Affected Versions tsMuxer version git-c6a0277 Description The issue occurs due to an assertion failure in the BitStreamReader::skipBits function located in the /bitStream.h file at line 132. This failure happens when the condition num = INT BIT is not met...

PT-2025-8017

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition issue has been identified in the Linux kernel, specifically in the IB/rdmavt module. The problem arises from a call to the rvt error qp function without proper locking, ...

openldap security update

CentOS Errata and Security Advisory CESA-2022:0621 An update for openldap is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Scientific Linux Security Update : openldap on SL7.x i686/x86_64 (2022:0621)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:0621-1 advisory. - openldap: assertion failure in Certificate List syntax validation CVE-2020-25709 - openldap: assertion failure in CSN normalization with invali...

Oracle Linux 7 : openldap (ELSA-2022-0621)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0621 advisory. - Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation 2040539 Tenable has extracted the preceding description block...

openldap security update

2.4.44-25 - Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation 2040539 - Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input 2040538...

RHEL 8 : unbound (RHSA-2022:0632)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0632 advisory. The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: integer overflow in the...

openldap: assertion failure in CSN normalization with invalid input

A flaw was found in OpenLDAP. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23. The highest threat from this vulnerability is to system availability...