Denial of Service Vulnerability in Samsung TizenRT
CVE-2022-40280

7.5HIGH

Key Information:

Vendor
Samsung
Status
Tizenrt
Vendor
CVE Published:
8 September 2022

Summary

A vulnerability in Samsung's TizenRT operating system is triggered by a missing sqlite3_close call following sqlite3_open_v2 within the createDB function. This oversight can lead to a denial of service, as it may prevent proper resource management and stability of the system. To protect against potential disruptions, users should ensure timely patches and updates are applied.

References

https://github.com/Samsung/TizenRT/issues/5627
x_refsource_MISC
https://www.sqlite.org/c3ref/open.html
x_refsource_MISC
https://github.com/Samsung/TizenRT/blob/f8f776dd183246ad8...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.