Weaknesses of type CWE-617

460 results

Asserção Acessível

É quando uma asserção (verificação de condição de debug) fica acessível em código de produção e pode ser acionada por entrada malformada ou não esperada. Se a asserção falha, o programa termina abruptamente, causando negação de serviço. O risco está em expor lógica de depuração que não deveria ser pública.

Example

Um servidor web com assert(tamanho_arquivo < 1GB) no meio do processamento de upload. Um atacante envia arquivo gigante, a asserção é acionada e o serviço cai. Usuários legítimos perdem acesso.

How to mitigate

Use exceções tratadas e validações explícitas em vez de asserções para entradas de usuários. Remova ou desative asserções em builds de produção; use flags de compilação (-DNDEBUG em C/C++, ou não incluir asserções no jar final em Java).

CVE-2023-27783HIGHAn issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt_cleanup function atEPSS 1.5%CVE-2023-27789HIGHAn issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoinEPSS 1.5%CVE-2023-27788HIGHAn issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 eEPSS 1.4%CVE-2021-20217—A flaw was found in Privoxy in versions before 3.0.31. An assertion failure triggered by a crafted CGI request may lead to denial of serviceEPSS 1.4%CVE-2023-32843HIGHIn 5G Modem, there is a possible system crash due to improper error handling. This could lead to remote denial of service when receiving malEPSS 1.4%CVE-2026-3608HIGHStack overflow in Kea daemonsEPSS 1.4%CVE-2021-27498HIGHEIPStackGroup OpENer Ethernet/IP Reachable AssertionEPSS 1.3%CVE-2021-27500HIGHEIPStackGroup OpENer Ethernet/IP Reachable AssertionEPSS 1.3%CVE-2023-28856MEDIUM`HINCRBYFLOAT` can be used to crash a redis-server processEPSS 1.3%CVE-2023-5517HIGHQuerying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabledEPSS 1.2%CVE-2023-5679HIGHEnabling both DNS64 and serve-stale may cause an assertion failure during recursive resolutionEPSS 1.2%CVE-2022-29228HIGHReachable assertion in EnvoyEPSS 1.2%CVE-2021-32037MEDIUMUser may trigger invariant when allowed to send commands directly to shardsEPSS 1.2%CVE-2025-49630HIGHApache HTTP Server: mod_proxy_http2 denial of serviceEPSS 1.2%CVE-2021-1422HIGHCisco Adaptive Security Appliance Software Release 9.16.1 and Cisco Firepower Threat Defense Software Release 7.0.0 IPsec Denial of Service VulnerabilityEPSS 1.2%CVE-2021-24029—A packet of death scenario is possible in mvfst via a specially crafted message during a QUIC session, which causes a crash via a failed assEPSS 1.2%CVE-2022-24777HIGHDenial of Service via reachable assertion in grpc-swiftEPSS 1.2%CVE-2022-48363HIGHIn MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain sEPSS 1.2%CVE-2022-20694MEDIUMCisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service VulnerabilityEPSS 1.2%CVE-2022-23581MEDIUM`CHECK`-failures during Grappler's `IsSimplifiableReshape` in TensorflowEPSS 1.2%