Skip to content
fr Sign in
7.5 High

CVE-2022-21227 The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of…

Description

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine.

Affected products and versions

Product Affected versions Fixed in
Sqlite3 5.0 earliest → < 5.0.3 5.0.3

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Sqlite3

The 2 CVEs of Sqlite3 →
CVE-2019-5018 An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0 8.1 High
Track this CVE