CVE-2022-21227: Denial of Service (DoS)
Published May 1, 2022
·Updated
The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine.
Affected Software
1 affected component
Ghost Sqlite3 Node.js<5.0.3
Remediation
Event History
May 1, 2022
CVE Published
via MITRE·03:25 PM
Data Sourced
via MITRE·03:25 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2022-21227.
2
What is the severity of CVE-2022-21227?
The severity of CVE-2022-21227 is high, with a severity value of 7.5.
3
What is the affected software?
The affected software is Ghost Sqlite3 with versions before 5.0.3 on Node.js.
4
How does CVE-2022-21227 affect the system?
CVE-2022-21227 can cause a Denial of Service (DoS) by invoking the toString function of an invalid Function object, potentially crashing the V8 engine.
5
How can CVE-2022-21227 be mitigated?
To mitigate CVE-2022-21227, it is recommended to update the sqlite3 package to version 5.0.3 or newer.