#cwe-617

共收录 216 条相关情报。

← 返回所有主题
漏洞预警2026-07-22 发布INFO

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, in DNS-over-QUIC environments, with high concurrency and under pressure, an assertion in libngtcp2 about monotonic times...

CVE-2026-14586

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, in DNS-over-QUIC environments, with high concurrency and under

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-21 发布INFO

The NXP LPUART serial driver (drivers/serial/uart_mcux_lpuart.c), when CONFIG_UART_USE_RUNTIME_CONFIGURE is enabled, called LPUART_Deinit() at the start of mcux_lpuart_configure...

CVE-2026-10674

The NXP LPUART serial driver (drivers/serial/uart_mcux_lpuart.c), when CONFIG_UART_USE_RUNTIME_CONFIGURE is enabled, cal

历史摘要 · 未重新核验 · NVD

安全公告2026-07-21 发布INFO

DoS (hard fault) in NXP LPUART driver: unsupported runtime UART config leaves clocks disabled

CVE-2026-10674

The NXP LPUART serial driver (drivers/serial/uart_mcux_lpuart.c), when CONFIG_UART_USE_RUNTIME_CONFIGURE is enabled, cal

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-21 发布INFO

Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). A specially crafted search request containing a null value ...

CVE-2026-63140

Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-16 发布INFO

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 937d0e9, an assertion failure is raised when the total numb...

CVE-2026-44435

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 93

历史摘要 · 未重新核验 · NVD

安全公告2026-07-16 发布INFO

Quicly: Remote Denial of Service via assertion failure when CRYPTO stream handshake data exceeds 32KB

CVE-2026-44435

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 93

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-14 发布INFO

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, in the interaction model command processing logic. When an InvokeCommandRequest is s...

CVE-2025-56365

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, in the interaction model co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.2, specifically within the Level Control cluster's periodic server tick logic. When a M...

CVE-2025-56362

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.2, specifically within the Lev

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-14 发布INFO

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru 1.4, specifically within the Level Control cluster's server tick logic (`emberAfLevelCont...

CVE-2025-56361

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru 1.4, specifically within the Lev

历史摘要 · 未重新核验 · NVD

安全公告2026-07-14 发布INFO

NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an...

CVE-2026-47475

NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a re

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-14 发布INFO

NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. A successful exp...

CVE-2026-47475

NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a re

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-09 发布INFO

Out-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows Overread Buffers, Input Data Manipulation. This issue affects Escargot: before 2dee...

CVE-2026-58307

Out-of-bounds read, Reachable assertion vulnerability in Samsung Open Source Escargot allows Overread Buffers, Input Dat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-06 发布INFO

vLLM is a library for LLM inference and serving. From 0.12.0 to before 0.24.0, sending a pure prompt embeds payload in a /v1/completions request with a model using M-RoPE causes...

CVE-2026-55514

vLLM is a library for LLM inference and serving. From 0.12.0 to before 0.24.0, sending a pure prompt embeds payload in a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-06 发布INFO

OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that triggers a reach...

CVE-2026-13122

OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service v

历史摘要 · 未重新核验 · NVD

安全公告2026-07-02 发布INFO

Zebra Address Book Aborted by IPv4-Mapped Mempool Misbehavior Update

CVE-2026-52829

### Am I affected You are affected if: 1. You run `zebrad` up to and including `v4.4.1`. 2. Your node listens on the d

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-26 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind syzbot reported a kernel BUG triggered ...

CVE-2026-53292

In the Linux kernel, the following vulnerability has been resolved: net: phonet: do not BUG_ON() in pn_socket_autobind(

来源摘录 · NVD

漏洞预警2026-06-25 发布INFO

CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to trigger a denial-of-service condition, impacting system availability when a specia...

CVE-2026-9718

CWE-617 Reachable Assertion vulnerability exists that could allow an authenticated attacker to trigger a denial-of-servi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These messages must come from a device that has already joined ...

CVE-2026-47146

In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-25 发布INFO

In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These messages must come from a device that has already joined ...

CVE-2026-47145

In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-24 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size The generic/642 test-case can reprodu...

CVE-2026-52961

In the Linux kernel, the following vulnerability has been resolved: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due

来源摘录 · NVD