DEBIAN-CVE-2022-21227

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

UBUNTU-CVE-2022-21227

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

CVE-2022-21227 Denial of Service (DoS)

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

CVE-2022-21227

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

CVE-2022-21144

This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash...

CVE-2022-21227

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

CVE-2022-21227: Undefined Security Weakness

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

CVE-2022-21144: Improper Input Validation

This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .toString method of the argument. If the argument's toString value is not a Function object V8 will crash...

PT-2022-6940

Name of the Vulnerable Software and Affected Versions sqlite3 versions 5.0.0 through 5.0.2 Description The issue is related to an uncontrolled resource consumption in the V8 component of the SQLite database management system, which can lead to a Denial of Service DoS. Exploitation of this issue c...

GHSA-32J9-6QQM-MQ9G Unhandled case in node-lmdb

The package node-lmdb before 0.9.7 is vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

CVE-2022-21164 Denial of Service (DoS)

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

CVE-2022-21164

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

node-lmdb security vulnerability

node-lmdb is a node.js binding for LMDB by the individual developer Timur Kristof of Hungary. A security vulnerability exists in node-lmdb that stems from node-lmdb's susceptibility to denial-of-service DoS attacks when defining uncallable ToString values. Successful exploitation will result in a...

PT-2022-14894

Name of the Vulnerable Software and Affected Versions node-lmdb versions prior to 0.9.7 Description The issue is related to a Denial of Service DoS condition that occurs when a non-invokable ToString value is defined, causing a crash during type check. Recommendations For versions prior to 0.9.7,...

CVE-2022-21164: Undefined Security Weakness

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

bitcoin-core:rpc: Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=6001319565983744 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: rpc Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

Denial of Service (DoS)

Overview posix is a missing POSIX system calls for Node. Affected versions of this package are vulnerable to Denial of Service DoS. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is not invokable not a function, and then it will crash with type-check. P...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine. PoC js let sqlite3 = require'sqlite3'.verbose; let db = new...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValue

Detailed Report: https://oss-fuzz.com/testcase?key=6327181893042176 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.getPropertyValue...

Spring AMQP RabbitMQ toString() DoS

The vulnerability of the toString method implementation in the Spring AMQP RabbitMQ messaging application is related to the restoration of unreliable data in memory during the processing of Dictionary objects from the java.util class. Exploiting this vulnerability could allow an attacker to cause...