Lucene search
+L

154 matches found

NVD
NVD
added 2022/03/16 4:15 p.m.10 views

CVE-2022-21164

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

7.5CVSS0.01301EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/03/16 3:25 p.m.18 views

CVE-2022-21164 Denial of Service (DoS)

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

3.7CVSS7.6AI score0.01301EPSS
Exploits1References2
CVE
CVE
added 2022/03/16 3:25 p.m.84 views

CVE-2022-21164

CVE-2022-21164 affects node-lmdb before 0.9.7. DoS occurs when defining a non-invokable ToString value, causing a crash during type checking. Root cause: improper handling of ToString in lmdb bindings. Impact: DoS through crash; exploitation details provided in Snyk advisory with PoC. Remediation...

7.5CVSS5.6AI score0.01301EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/03/16 3:25 p.m.12 views

CVE-2022-21164 Denial of Service (DoS)

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

3.7CVSS7.1AI score0.01301EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2022/03/16 3:23 p.m.4 views

CVE-2022-21164

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

7.5CVSS7.1AI score0.01301EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/03/16 12:0 a.m.6 views

node-lmdb 安全漏洞

node-lmdb is a node.js binding for LMDB by the individual developer Timur Kristof of Hungary. A security vulnerability exists in node-lmdb that stems from node-lmdb's susceptibility to denial-of-service DoS attacks when defining uncallable ToString values. Successful exploitation will result in a...

7.5CVSS7.2AI score0.01301EPSS
Exploits1References3
Snyk
Snyk
added 2022/02/14 1:36 p.m.4 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check. PoC js var lmdb = require"node-lmdb"; var fs = require'fs' var dbname = '/mydata' if !fs.existsSyncdbname fs.mkdirSyncdbname...

7.5CVSS6.9AI score0.01301EPSS
Exploits1References2
vulnersOsv
vulnersOsv
added 2022/01/05 12:0 p.m.5 views

azoth (=0.1.0), azoth-lmdb (>=0.1.0 <=0.2.5) +26 more potentially affected by unknown CVE via lmdb (>=0.7.2 <=0.8.0)

lmdb CARGO version =0.7.2, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.9.3, =0.1.0, =1.3.3, =0.1.0, =0.1.0, =0.5.0, =0.8.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0001...

5.8AI score
Exploits0
OSV
OSV
added 2022/01/05 12:0 p.m.11 views

RUSTSEC-2022-0001 lmdb is unmaintained, use lmdb-rkv instead

The lmdb crate hasn't had any updates since August 2018. Mozilla's lmdb-rkv fork of the crate has received additional maintenance work beyond that and is the best available replacement...

7.2AI score
Exploits0References3
RustSec
RustSec
added 2022/01/05 12:0 p.m.25 views

lmdb is unmaintained, use lmdb-rkv instead

The lmdb crate hasn't had any updates since August 2018. Mozilla's lmdb-rkv fork of the crate has received additional maintenance work beyond that and is the best available replacement...

1.8AI score
Exploits0
AlmaLinux
AlmaLinux
added 2020/11/03 12:26 p.m.20 views

lmdb bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

1.5AI score
Exploits0
Rockylinux
Rockylinux
added 2020/11/03 12:26 p.m.20 views

lmdb bug fix and enhancement update

An update is available for lmdb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

1.9AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2020/09/21 12:0 a.m.22 views

openSUSE Security Update : libetpan (openSUSE-2020-1454)

This update for libetpan fixes the following issues : Update to 1.9.4 boo1174579, CVE-2020-15953 : - Bugfixes on QUOTA - Varios warning fixes & build fixes Update to version 1.9.3 - Added IMAP CLIENTID / SMTP CLIENTID support - Use Cyrus SASL 2.1.27 Update to version 1.9.2 - Support of TLS SNI -...

7.4CVSS7.7AI score0.02413EPSS
Exploits1References2
OPENSUSE Linux
OPENSUSE Linux
added 2020/09/19 12:0 a.m.48 views

Security update for libetpan (moderate)

openSUSE Security Update: Security update for libetpan Announcement ID: openSUSE-SU-2020:1454-1 Rating: moderate References: 1174579 Cross-References: CVE-2020-15953 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for libetpa...

7.4CVSS7.5AI score0.02413EPSS
Exploits1References1
Veracode
Veracode
added 2019/12/02 7:40 a.m.13 views

Denial Of Service (DoS)

python-lmdb is vulnerable to denial of service. An application crash occurs when mdbcursoropen fails. The crash will occur when cpython is built with PyTRACEREFS...

3.4AI score
Exploits0
Veracode
Veracode
added 2019/12/02 7:37 a.m.13 views

Out-of-bounds Write

py-lmdb is vulnerable to out-of-bounds write. The memcpy destination is not properly set up in the mdbnodeadd function for certain values of mdflags, which would allow an attacker to perform invalid write operations when accessing a data.mdb file...

9.8CVSS3.7AI score0.01765EPSS
Exploits1References4Affected Software1
CNVD
CNVD
added 2019/09/12 12:0 a.m.6 views

py-lmdb buffer overflow vulnerability

py-lmdb is an LMDB an embedded transactional database for Python. A buffer error vulnerability exists in py-lmdb version 0.97. An attacker can exploit this vulnerability to cause an invalid write operation...

9.8CVSS7.1AI score0.01765EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/12 12:0 a.m.5 views

py-lmdb buffer overflow vulnerability (CNVD-2019-39376)

py-lmdb is an LMDB an embedded transactional database for Python. A buffer overflow vulnerability exists in py-lmdb version 0.97. An attacker can exploit this vulnerability to cause an invalid write operation...

7.5CVSS7.4AI score0.01543EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/12 12:0 a.m.2 views

py-lmdb buffer overflow vulnerability (CNVD-2019-39380)

py-lmdb is an LMDB an embedded transactional database for Python. A buffer overflow vulnerability exists in py-lmdb version 0.97. The vulnerability stems from a networked system or product that performs operations in memory without properly validating data boundaries, resulting in incorrect read...

9.8CVSS7.4AI score0.01963EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/12 12:0 a.m.2 views

py-lmdb numeric error vulnerability

py-lmdb is an LMDB an embedded transactional database for Python. A numeric error vulnerability exists in py-lmdb version 0.97. The vulnerability arises from a number generated by a networked system or product that does not properly compute or convert the number. An attacker could exploit this...

7.5CVSS7.1AI score0.01786EPSS
Exploits1References1
Rows per page
Query Builder