EUVD-2022-1280

Malicious code in bioql PyPI...

@agoric/cosmic-swingset (>=0.15.0, <=0.20.1), @agoric/swing-store-lmdb (>=0.2.0, <=0.3.6-dev.2) +42 more potentially affected by CVE-2022-21164 via node-lmdb (>=0.3.0, <=0.9.6)

node-lmdb NPM version =0.3.0, =0.15.0, =0.2.0, =0.0.7, =0.0.1, =0.2.0, =1.3.0, =0.1.1, =0.1.4, =0.6.2, =0.0.1, =0.1.0, =0.82.0, =0.0.7, =0.0.2, =0.4.2 and more Source cves: CVE-2022-21164 Source advisory: OSV:GHSA-32J9-6QQM-MQ9G...

GHSA-32J9-6QQM-MQ9G Unhandled case in node-lmdb

The package node-lmdb before 0.9.7 is vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

Unhandled case in node-lmdb

The package node-lmdb before 0.9.7 is vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

CVE-2022-21164

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

CVE-2022-21164 Denial of Service (DoS)

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

CVE-2022-21164

CVE-2022-21164 affects node-lmdb before 0.9.7. DoS occurs when defining a non-invokable ToString value, causing a crash during type checking. Root cause: improper handling of ToString in lmdb bindings. Impact: DoS through crash; exploitation details provided in Snyk advisory with PoC. Remediation...

CVE-2022-21164

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

CVE-2022-21164 Denial of Service (DoS)

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

CVE-2022-21164

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

CVE-2022-21164: Undefined Security Weakness

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

PT-2022-14894

Name of the Vulnerable Software and Affected Versions node-lmdb versions prior to 0.9.7 Description The issue is related to a Denial of Service DoS condition that occurs when a non-invokable ToString value is defined, causing a crash during type check. Recommendations For versions prior to 0.9.7,...

node-lmdb 安全漏洞

node-lmdb is a node.js binding for LMDB by the individual developer Timur Kristof of Hungary. A security vulnerability exists in node-lmdb that stems from node-lmdb's susceptibility to denial-of-service DoS attacks when defining uncallable ToString values. Successful exploitation will result in a...

@agoric/cosmic-swingset (>=0.15.0, <=0.20.1), @agoric/swing-store-lmdb (>=0.2.0, <=0.3.6-dev.2) +42 more potentially affected by CVE-2022-21164 via node-lmdb (>=0.3.0, <=0.9.6)

node-lmdb NPM version =0.3.0, =0.15.0, =0.2.0, =0.0.7, =0.0.1, =0.2.0, =1.3.0, =0.1.1, =0.1.4, =0.6.2, =0.0.1, =0.1.0, =0.82.0, =0.0.7, =0.0.2, =0.4.2 and more Source cves: CVE-2022-21164 Source advisory: SNYK:JS-NODELMDB-2400723...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check. PoC js var lmdb = require"node-lmdb"; var fs = require'fs' var dbname = '/mydata' if !fs.existsSyncdbname fs.mkdirSyncdbname...