Lucene search
SnykCVELIST:CVE-2022-21164HistoryMar 16, 2022 - 3:25 p.m.
CVE-2022-21164 Denial of Service (DoS)
2022-03-1615:25:13
snyk
www.cve.org
1
cve-2022-21164
dos
node-lmdb
vulnerability
CVSS3
3.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P
EPSS
0.001
Percentile
37.9%
The package node-lmdb before 0.9.7 are vulnerable to Denial of Service (DoS) when defining a non-invokable ToString value, which will cause a crash during type check.
CNA Affected
[
{
"product": "node-lmdb",
"vendor": "n/a",
"versions": [
{
"lessThan": "0.9.7",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
osv
osv
Unhandled case in node-lmdb
2022-03-17 00:00:27
CVE-2022-21164
2022-03-16 16:15:10
cve
cve
CVE-2022-21164
2022-03-16 16:15:10
prion
prion
Design/Logic Flaw
2022-03-16 16:15:00
nvd
nvd
CVE-2022-21164
2022-03-16 16:15:10
github
github
Unhandled case in node-lmdb
2022-03-17 00:00:27
CVSS3
3.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P
EPSS
0.001
Percentile
37.9%
Related for CVELIST:CVE-2022-21164