819 matches found
Design/Logic Flaw
The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...
CVE-2022-21227
The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...
CVE-2022-21227 Denial of Service (DoS)
The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...
CVE-2022-21227
The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...
7ghost (>=4.11.0, <=4.11.46), 90crew-sqlite-async (0.0.4) +195 more potentially affected by CVE-2022-21227 via sqlite3 (>=5.0.0, <=5.0.2)
sqlite3 NPM version =5.0.0, =4.11.0, =0.1.0, =1.1.0, =12.1.0-alpha.6, =2.0.11, =0.2.5, =0.1.3-alpha.0, =0.1.19-alpha.0, =0.1.11-alpha.0, =0.1.3-alpha.0, =7.0.0-alpha.18, =7.3.8 and more Source cves: CVE-2022-21227 Source advisory: MEND:CVE-2022-21227...
CVE-2022-21227 Denial of Service (DoS)
The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...
CVE-2022-21227
The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...
CVE-2022-21227
CVE-2022-21227 affects the sqlite3 package prior to 5.0.3. The vulnerability is a Denial of Service caused by improper input handling in toString, where passing a crafted Function object can cause the V8 engine to crash. Public documents consistently describe this DoS vector and note the affected...
CVE-2022-21227
The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...
CVE-2022-21227: Undefined Security Weakness
The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...
Denial Of Service (DoS)
sqlite3 is vulnerable to denial of service. The vulnerability exists because the library does not properly verify the ToString function's return values in statement.cc before casting to the utf-8 encoding, allowing an attacker to crash the application by providing invalid parameters...
GHSA-9QRH-QJMC-5W2P Denial-of-Service when binding invalid parameters in sqlite3
Affected versions of sqlite3 will experience a fatal error when supplying a specific object in the parameter array. This error causes the application to crash and could not be caught. Users of sqlite3 v5.0.0, v5.0.1 and v5.0.2 are affected by this. This issue is fixed in v5.0.3. All users are...
7ghost (>=4.11.0, <=4.11.46), 90crew-sqlite-async (0.0.4) +195 more potentially affected by CVE-2022-21227 via sqlite3 (>=5.0.0, <=5.0.2)
sqlite3 NPM version =5.0.0, =4.11.0, =0.1.0, =1.1.0, =12.1.0-alpha.6, =2.0.11, =0.2.5, =0.1.3-alpha.0, =0.1.19-alpha.0, =0.1.11-alpha.0, =0.1.3-alpha.0, =7.0.0-alpha.18, =7.3.8 and more Source cves: CVE-2022-21227 Source advisory: OSV:GHSA-9QRH-QJMC-5W2P...
Denial-of-Service when binding invalid parameters in sqlite3
Affected versions of sqlite3 will experience a fatal error when supplying a specific object in the parameter array. This error causes the application to crash and could not be caught. Users of sqlite3 v5.0.0, v5.0.1 and v5.0.2 are affected by this. This issue is fixed in v5.0.3. All users are...
7ghost (>=4.11.0, <=4.11.46), 90crew-sqlite-async (0.0.4) +195 more potentially affected by CVE-2022-21227 via sqlite3 (>=5.0.0, <=5.0.2)
sqlite3 NPM version =5.0.0, =4.11.0, =0.1.0, =1.1.0, =12.1.0-alpha.6, =2.0.11, =0.2.5, =0.1.3-alpha.0, =0.1.19-alpha.0, =0.1.11-alpha.0, =0.1.3-alpha.0, =7.0.0-alpha.18, =7.3.8 and more Source cves: CVE-2022-21227 Source advisory: GHSA-9QRH-QJMC-5W2P...
PT-2022-6940
Name of the Vulnerable Software and Affected Versions sqlite3 versions 5.0.0 through 5.0.2 Description The issue is related to an uncontrolled resource consumption in the V8 component of the SQLite database management system, which can lead to a Denial of Service DoS. Exploitation of this issue c...
sqlite3:ossfuzz: Use-of-uninitialized-value in sqlite3VdbeChangeEncoding
Detailed Report: https://oss-fuzz.com/testcase?key=5747350217293824 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sqlite3VdbeChangeEncoding sqlite3VdbeExec...
sqlite3:ossfuzz: Use-of-uninitialized-value in setResultStrOrError
Detailed Report: https://oss-fuzz.com/testcase?key=5313340013936640 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: setResultStrOrError printfFunc sqlite3VdbeExec...
sqlite3:ossfuzz: Use-of-uninitialized-value in sqlite3VdbeChangeEncoding
Detailed Report: https://oss-fuzz.com/testcase?key=4546929305976832 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sqlite3VdbeChangeEncoding sqlite3resultvalue...