CVE-2022-21227
Denial of Service (DoS)
Summary
Denial of Service (DoS)
Original description
The description as published by the source.
The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-21227 node-sqlite3 Fixed in: 5.0.0+ds1-1+deb11u1
References
- advisory github.com
- advisory nvd.nist.gov
- advisory snyk.io
- advisory snyk.io
- patch github.com