Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-40278

An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisioningdatabasemanager.c has a missing sqlite3_free after sqlite3_exec, leading to a denial of service.

Published

2022-09-29T03:15:15.433

Last Modified

2024-11-21T07:21:10.783

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses

Type: Primary
CWE-416

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	samsung	tizenrt	1.0	Yes
Operating System	samsung	tizenrt	1.1	Yes
Operating System	samsung	tizenrt	2.0	Yes
Operating System	samsung	tizenrt	2.0	Yes
Operating System	samsung	tizenrt	3.0	Yes
Operating System	samsung	tizenrt	3.1	Yes

References

https://github.com/Samsung/TizenRT/blob/f8f776dd183246ad8890422c1ee5e8f33ab2aaaf/external/iotivity/iotivity_1.2-rel/resource/csdk/security/provisioning/src/provisioningdatabasemanager.c#L103 Exploit, Third Party Advisory ([email protected])
https://github.com/Samsung/TizenRT/blob/f8f776dd183246ad8890422c1ee5e8f33ab2aaaf/external/iotivity/iotivity_1.2-rel/resource/csdk/security/provisioning/src/provisioningdatabasemanager.c#L107 Exploit, Third Party Advisory ([email protected])
https://github.com/Samsung/TizenRT/issues/5628 Issue Tracking, Third Party Advisory ([email protected])
https://www.sqlite.org/c3ref/exec.html Technical Description, Third Party Advisory ([email protected])
https://github.com/Samsung/TizenRT/blob/f8f776dd183246ad8890422c1ee5e8f33ab2aaaf/external/iotivity/iotivity_1.2-rel/resource/csdk/security/provisioning/src/provisioningdatabasemanager.c#L103 Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/Samsung/TizenRT/blob/f8f776dd183246ad8890422c1ee5e8f33ab2aaaf/external/iotivity/iotivity_1.2-rel/resource/csdk/security/provisioning/src/provisioningdatabasemanager.c#L107 Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/Samsung/TizenRT/issues/5628 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.sqlite.org/c3ref/exec.html Technical Description, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)