522 matches found
Denial of Service via reachable assertion
A grpc-swift server is vulnerable to a denial of service attack via a reachable assertion. This was due to incorrect logic when handling GOAWAY frames. The attack is low-effort: it takes very little resources to construct and send the required sequence of frames. The impact on availability is hig...
CVE-2022-40538
Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network...
CVE-2022-40538 Reachable assertion in Modem
Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network...
PT-2023-13822 · Qualcomm · Snapdragon +15
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs due to a reachable assertion in the modem. This happens when the modem processes a...
PT-2023-13262 · Modem · Modem
Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a Transient DOS due to a reachable assertion in the Modem, caused by an invalid network configuration. Recommendations: At the moment, there is no information about a...
CVE-2022-40504
CVE-2022-40504 describes a transient DoS caused by a reachable assertion in the Qualcomm modem when a UE processes a Downlink Data Indication. Connected sources identify the affected component as Qualcomm modem/firmware (e.g., 315 5G IoT Modem) with no public details on a patch or fix in the prov...
CVE-2022-40504 Reachable assertion in Modem
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network...
CVE-2022-40508 Reachable assertion in Modem
Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported...
CVE-2022-40508
CVE-2022-40508 is a reported transient denial-of-service caused by a reachable assertion in the Modem while processing cross-carrier scheduling configuration, not supported. The CVE entry shows a CVSS v3.1 base score of 7.5 (HIGH), with NETWORK attack vector, no privileges required, no user inter...
CVE-2022-34144
CVE-2022-34144 is a Transient Denial of Service arising from a reachable assertion in the Modem during OSI decode scheduling. Documented across NVD/Red Hat/PRION/vuln enrichment entries, the issue targets a Modem component (Qualcomm-based ecosystems) and is rated High (CVSS 3.1: 7.5) with network...
PT-2023-13796 · Qualcomm · 315 5G Iot Modem Firmware +164
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs when a UE User Equipment receives a Downlink Data Indication message from the...
PT-2023-13342 · Modem · Modem
Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a Transient DOS due to a reachable assertion in the Modem during OSI decode scheduling. Recommendations: At the moment, there is no information about a newer version...
PT-2023-9394 · Avahi +9 · Avahi +9
Name of the Vulnerable Software and Affected Versions: Avahi affected versions not specified Description: A vulnerability exists in the Avahi service discovery system, related to a reachable assertion in the dbus set host name function. This issue can be exploited to cause a denial of service...
PT-2023-9390 · Avahi +9 · Avahi +9
Name of the Vulnerable Software and Affected Versions: Avahi affected versions not specified Description: A vulnerability exists in Avahi due to a reachable assertion in the avahi dns packet append record function. This issue can be exploited to cause a denial of service. Recommendations: At the...
PT-2023-26458 · Avahi +8 · Avahi +8
Name of the Vulnerable Software and Affected Versions: Avahi affected versions not specified Description: A vulnerability was found in Avahi, where a reachable assertion exists in the avahi alternative host name function. Recommendations: At the moment, there is no information about a newer versi...
PT-2023-7434 · Avahi +9 · Avahi +9
Name of the Vulnerable Software and Affected Versions: Avahi affected versions not specified Description: A vulnerability exists in the avahi rdata parse function of Avahi, which is related to a reachable assertion. This issue can be exploited by an attacker to cause a denial of service...
Fedora 38 : frr (2023-77d00facd0)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-77d00facd0 advisory. New version 8.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
CVE-2022-36440
A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peekforas4capability function. Attackers can maliciously construct BGP open packets and send them to BGP peers running frr-bgpd, resulting in DoS...
