CWE-617 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-617/ Sun, 26 Feb 2023 06:51:47 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-617 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-617/ 32 32 CVE-2018-9303 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9303/ Sun, 26 Feb 2023 06:51:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9303/ In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort.

The post CVE-2018-9303 appeared first on CVE Vulnerability.

]]> In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort.

The post CVE-2018-9303 appeared first on CVE Vulnerability.

]]> CVE-2018-9252 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9252/ Sun, 26 Feb 2023 06:51:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9252/ JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c.

The post CVE-2018-9252 appeared first on CVE Vulnerability.

]]> JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_abstorelstepsize in libjasper/jpc/jpc_enc.c.

The post CVE-2018-9252 appeared first on CVE Vulnerability.

]]> CVE-2018-9055 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9055/ Sun, 26 Feb 2023 06:51:42 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9055/ JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c.

The post CVE-2018-9055 appeared first on CVE Vulnerability.

]]> JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c.

The post CVE-2018-9055 appeared first on CVE Vulnerability.

]]> CVE-2018-7712 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7712/ Sun, 26 Feb 2023 06:51:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7712/ ** DISPUTED ** The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failure) because (size.height <= (1<<20)) may be false. Note: “OpenCV CV_Assert is not an assertion (C-like assert()), it is regular C++ exception which can raised in case of invalid or non-supported parameters.”

The post CVE-2018-7712 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failure) because (size.height <= (1<<20)) may be false. Note: “OpenCV CV_Assert is not an assertion (C-like assert()), it is regular C++ exception which can raised in case of invalid or non-supported parameters.”

The post CVE-2018-7712 appeared first on CVE Vulnerability.

]]> CVE-2018-7713 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7713/ Sun, 26 Feb 2023 06:51:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7713/ ** DISPUTED ** The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failure) because (size.width <= (1<<20)) may be false. Note: “OpenCV CV_Assert is not an assertion (C-like assert()), it is regular C++ exception which can raised in case of invalid or non-supported parameters.”

The post CVE-2018-7713 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failure) because (size.width <= (1<<20)) may be false. Note: “OpenCV CV_Assert is not an assertion (C-like assert()), it is regular C++ exception which can raised in case of invalid or non-supported parameters.”

The post CVE-2018-7713 appeared first on CVE Vulnerability.

]]> CVE-2018-7714 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7714/ Sun, 26 Feb 2023 06:51:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7714/ ** DISPUTED ** The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failure) because (pixels <= (1<<30)) may be false. Note: “OpenCV CV_Assert is not an assertion (C-like assert()), it is regular C++ exception which can raised in case of invalid or non-supported parameters.”

The post CVE-2018-7714 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failure) because (pixels <= (1<<30)) may be false. Note: “OpenCV CV_Assert is not an assertion (C-like assert()), it is regular C++ exception which can raised in case of invalid or non-supported parameters.”

The post CVE-2018-7714 appeared first on CVE Vulnerability.

]]> CVE-2018-5734 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5734/ Sun, 26 Feb 2023 06:50:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5734/ While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn’t contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2.

The post CVE-2018-5734 appeared first on CVE Vulnerability.

]]> While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn’t contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2.

The post CVE-2018-5734 appeared first on CVE Vulnerability.

]]> CVE-2018-5735 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5735/ Sun, 26 Feb 2023 06:50:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5735/ The Debian backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858; Affects Debian versions 9.9.5.dfsg-9+deb8u15; 9.9.5.dfsg-9+deb8u18; 9.10.3.dfsg.P4-12.3+deb9u5; 9.11.5.P4+dfsg-5.1 No ISC releases are affected. Other packages from other distributions who did similar backports for the fix for 2017-3137 may also be affected.

The post CVE-2018-5735 appeared first on CVE Vulnerability.

]]> The Debian backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858; Affects Debian versions 9.9.5.dfsg-9+deb8u15; 9.9.5.dfsg-9+deb8u18; 9.10.3.dfsg.P4-12.3+deb9u5; 9.11.5.P4+dfsg-5.1 No ISC releases are affected. Other packages from other distributions who did similar backports for the fix for 2017-3137 may also be affected.

The post CVE-2018-5735 appeared first on CVE Vulnerability.

]]> CVE-2018-5736 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5736/ Sun, 26 Feb 2023 06:50:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5736/ An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone in quick succession. This defect could be deliberately exercised by an attacker who is permitted to cause a vulnerable server to initiate zone transfers […]

The post CVE-2018-5736 appeared first on CVE Vulnerability.

]]> An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone in quick succession. This defect could be deliberately exercised by an attacker who is permitted to cause a vulnerable server to initiate zone transfers (for example: by sending valid NOTIFY messages), causing the named process to exit after failing the assertion test. Affects BIND 9.12.0 and 9.12.1.

The post CVE-2018-5736 appeared first on CVE Vulnerability.

]]> CVE-2018-5737 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5737/ Sun, 26 Feb 2023 06:50:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5737/ A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause undesirable behavior from named, such as a recursion loop or excessive logging. […]

The post CVE-2018-5737 appeared first on CVE Vulnerability.

]]> A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause undesirable behavior from named, such as a recursion loop or excessive logging. Deliberate exploitation of this condition could cause operational problems depending on the particular manifestation — either degradation or denial of service. Affects BIND 9.12.0 and 9.12.1.

The post CVE-2018-5737 appeared first on CVE Vulnerability.

]]>