Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-25852

Опубликовано: 17 июн. 2022
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

All versions of package pg-native; all versions of package libpq are vulnerable to Denial of Service (DoS) when the addons attempt to cast the second argument to an array and fail. This happens for every non-array argument passed. Note: pg-native is a mere binding to npm's libpq library, which in turn has the addons and bindings to the actual C libpq library. This means that problems found in pg-native may transitively impact npm's libpq.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:libpq_project:libpq:*:*:*:*:*:node.js:*:*
cpe:2.3:a:pg-native_project:pg-native:*:*:*:*:*:node.js:*:*

EPSS

Процентиль: 62%
0.00433
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-704

Связанные уязвимости

CVSS3: 7.5
github
больше 3 лет назад

pg-native and libpq vulnerable to uncontrolled resource consumption

EPSS

Процентиль: 62%
0.00433
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-704