Weaknesses of type CWE-617
559 resultsAsserção Acessível
É quando uma asserção (verificação de condição de debug) fica acessível em código de produção e pode ser acionada por entrada malformada ou não esperada. Se a asserção falha, o programa termina abruptamente, causando negação de serviço. O risco está em expor lógica de depuração que não deveria ser pública.
Example
Um servidor web com assert(tamanho_arquivo < 1GB) no meio do processamento de upload. Um atacante envia arquivo gigante, a asserção é acionada e o serviço cai. Usuários legítimos perdem acesso.
How to mitigate
Use exceções tratadas e validações explícitas em vez de asserções para entradas de usuários. Remova ou desative asserções em builds de produção; use flags de compilação (-DNDEBUG em C/C++, ou não incluir asserções no jar final em Java).
CVE-2026-102071HIGHJunos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabledEPSS 0.3%CVE-2026-102041HIGHJunos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabledEPSS 0.3%CVE-2026-101993HIGHJunos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is usedEPSS 0.3%CVE-2026-102034HIGHJunos OS and Junos OS Evolved: An attacker causes l2ald to restart when MC-LAG ICCP MAC synchronization is enabledEPSS 0.3%CVE-2026-102042HIGHJunos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabledEPSS 0.3%CVE-2026-101996HIGHJunos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configuredEPSS 0.3%CVE-2026-102011HIGHJunos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabledEPSS 0.3%CVE-2026-105754MEDIUMvLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresEPSS 0.3%CVE-2026-101989HIGHJunos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabledEPSS 0.3%CVE-2026-101984HIGHJunos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configuredEPSS 0.3%CVE-2023-37005MEDIUMOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An aEPSS 0.3%CVE-2026-41584CRITICALZEBRA: rk Identity Point Panic in Transaction VerificationEPSS 0.3%CVE-2023-37004MEDIUMOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An aEPSS 0.3%CVE-2023-37003MEDIUMOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An aEPSS 0.3%CVE-2023-37007MEDIUMOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An aEPSS 0.3%CVE-2023-37006MEDIUMOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An aEPSS 0.3%CVE-2023-37002MEDIUMOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An aEPSS 0.3%CVE-2023-37012MEDIUMOpen5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An aEPSS 0.3%CVE-2025-20757MEDIUMIn Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connecEPSS 0.3%CVE-2026-33977MEDIUMFreeRDP: DoS via WINPR_ASSERT in IMA ADPCM audio decoder (dsp.c:331)EPSS 0.3%