Falhas do tipo CWE-617

543 resultados

Asserção acessível ao atacante

É quando o código contém uma asserção (assertion) que pode ser disparada por um atacante, causando travamento ou parada da aplicação. Diferente de asserções usadas apenas em desenvolvimento, essas chegam à produção e podem ser exploradas para negar serviço.

Exemplo

Um servidor web valida entrada do usuário com assert(tamanho_entrada < 1000). Um atacante envia payload grande, a asserção falha e o processo morre, deixando o serviço indisponível para outros usuários.

Como mitigar

Remova ou desative asserções em código de produção; use exceções tratáveis em vez de assertions para validações que dependem de entrada do usuário. Compile com flags que desabilitam assertions (-da em Java) antes de deployar.

CVE-2024-42645HIGHAn issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain message, leading to a Denial of ServEPSS 0.6%CVE-2026-3119MEDIUMAuthenticated query containing a TKEY record may cause named to terminate unexpectedlyEPSS 0.6%CVE-2024-45396HIGHQuicly assertion failuresEPSS 0.6%CVE-2026-92157MEDIUMF´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertionEPSS 0.6%CVE-2024-24429HIGHA reachable assertion in the nas_eps_send_emm_to_esm function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a EPSS 0.6%CVE-2026-1737MEDIUMOpen5GS CreateBearerRequest s5c-handler.c sgwc_s5c_handle_create_bearer_request assertionEPSS 0.6%CVE-2026-34219HIGHlibp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant OverflowEPSS 0.6%CVE-2026-23991MEDIUMgo-tuf affected by client DoS via malformed server responseEPSS 0.6%CVE-2026-102012HIGHJunos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabledEPSS 0.6%CVE-2026-80274HIGHValidating resolver can abort while caching a mismatched NOQNAME proofEPSS 0.6%CVE-2026-76163HIGHnamed aborts on a TKEY query when the user configuration has no global options statementEPSS 0.6%CVE-2026-66754HIGHRouille 0.1.6 - 3.6.2 Reachable Assertion DoS via remove_prefix percent-encodingEPSS 0.6%CVE-2024-39949HIGHA vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, cEPSS 0.6%CVE-2026-92150HIGHF´: GenericHub Malformed Buffer Assertion DoSEPSS 0.6%CVE-2026-29116HIGHA vulnerability has been found in some Dahua products could allow an unauthenticated remote attacker to send a specially crafted packet, triEPSS 0.6%CVE-2023-37013HIGHOpen5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a sufficiently large ASN.1 packet over the S1AP interEPSS 0.5%CVE-2026-82590MEDIUMOpen5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertionEPSS 0.5%CVE-2026-92151HIGHF´: SpacePacketDeframer Small Packet Assertion DoSEPSS 0.5%CVE-2026-35058MEDIUMImproper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows EPSS 0.5%CVE-2024-50613MEDIUMlibsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.EPSS 0.5%