An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisioningdatabasemanager.c has a missing sqlite3_close after sqlite3_open_v2, leading to a denial of service.
References
| Link | Resource |
|---|---|
| https://github.com/Samsung/TizenRT/blob/f8f776dd183246ad8890422c1ee5e8f33ab2aaaf/external/iotivity/iotivity_1.2-rel/resource/csdk/security/provisioning/src/provisioningdatabasemanager.c#L100 | Third Party Advisory |
| https://github.com/Samsung/TizenRT/issues/5627 | Issue Tracking Third Party Advisory |
| https://www.sqlite.org/c3ref/open.html | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
13 Sep 2022, 18:38
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/Samsung/TizenRT/blob/f8f776dd183246ad8890422c1ee5e8f33ab2aaaf/external/iotivity/iotivity_1.2-rel/resource/csdk/security/provisioning/src/provisioningdatabasemanager.c#L100 - Third Party Advisory | |
| References | (MISC) https://github.com/Samsung/TizenRT/issues/5627 - Issue Tracking, Third Party Advisory | |
| References | (MISC) https://www.sqlite.org/c3ref/open.html - Third Party Advisory | |
| First Time |
Samsung
Samsung tizenrt |
|
| CPE | cpe:2.3:o:samsung:tizenrt:1.1:-:*:*:*:*:*:* cpe:2.3:o:samsung:tizenrt:3.0:gbm:*:*:*:*:*:* cpe:2.3:o:samsung:tizenrt:2.0:-:*:*:*:*:*:* cpe:2.3:o:samsung:tizenrt:1.0:m1:*:*:*:*:*:* |
|
| CWE | CWE-772 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
08 Sep 2022, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-09-08 22:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-40280
Mitre link : CVE-2022-40280
CVE.ORG link : CVE-2022-40280
JSON object : View
Products Affected
samsung
- tizenrt
CWE
CWE-772
Missing Release of Resource after Effective Lifetime