EUVD-2022-1280

Malicious code in bioql PyPI...

Unhandled case in node-lmdb

The package node-lmdb before 0.9.7 is vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

@agoric/cosmic-swingset (>=0.15.0, <=0.20.1), @agoric/swing-store-lmdb (>=0.2.0, <=0.3.6-dev.2) +42 more potentially affected by CVE-2022-21164 via node-lmdb (>=0.3.0, <=0.9.6)

node-lmdb NPM version =0.3.0, =0.15.0, =0.2.0, =0.0.7, =0.0.1, =0.2.0, =1.3.0, =0.1.1, =0.1.4, =0.6.2, =0.0.1, =0.1.0, =0.82.0, =0.0.7, =0.0.2, =0.4.2 and more Source cves: CVE-2022-21164 Source advisory: OSV:GHSA-32J9-6QQM-MQ9G...

GHSA-32J9-6QQM-MQ9G Unhandled case in node-lmdb

The package node-lmdb before 0.9.7 is vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

CVE-2022-21164

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

CVE-2022-21164

CVE-2022-21164 affects node-lmdb before 0.9.7. DoS occurs when defining a non-invokable ToString value, causing a crash during type checking. Root cause: improper handling of ToString in lmdb bindings. Impact: DoS through crash; exploitation details provided in Snyk advisory with PoC. Remediation...

CVE-2022-21164 Denial of Service (DoS)

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

CVE-2022-21164 Denial of Service (DoS)

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

CVE-2022-21164

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

node-lmdb 安全漏洞

node-lmdb is a node.js binding for LMDB by the individual developer Timur Kristof of Hungary. A security vulnerability exists in node-lmdb that stems from node-lmdb's susceptibility to denial-of-service DoS attacks when defining uncallable ToString values. Successful exploitation will result in a...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check. PoC js var lmdb = require"node-lmdb"; var fs = require'fs' var dbname = '/mydata' if !fs.existsSyncdbname fs.mkdirSyncdbname...

@agoric/cosmic-swingset (>=0.15.0, <=0.20.1), @agoric/swing-store-lmdb (>=0.2.0, <=0.3.6-dev.2) +42 more potentially affected by CVE-2022-21164 via node-lmdb (>=0.3.0, <=0.9.6)

node-lmdb NPM version =0.3.0, =0.15.0, =0.2.0, =0.0.7, =0.0.1, =0.2.0, =1.3.0, =0.1.1, =0.1.4, =0.6.2, =0.0.1, =0.1.0, =0.82.0, =0.0.7, =0.0.2, =0.4.2 and more Source cves: CVE-2022-21164 Source advisory: SNYK:JS-NODELMDB-2400723...