Vulnerability Description
An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisioningdatabasemanager.c has a missing sqlite3_close after sqlite3_open_v2, leading to a denial of service.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Samsung | Tizenrt | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/Samsung/TizenRT/blob/f8f776dd183246ad8890422c1ee5e8f33ab2aaafThird Party Advisory
- https://github.com/Samsung/TizenRT/issues/5627Issue TrackingThird Party Advisory
- https://www.sqlite.org/c3ref/open.htmlThird Party Advisory
- https://github.com/Samsung/TizenRT/blob/f8f776dd183246ad8890422c1ee5e8f33ab2aaafThird Party Advisory
- https://github.com/Samsung/TizenRT/issues/5627Issue TrackingThird Party Advisory
- https://www.sqlite.org/c3ref/open.htmlThird Party Advisory
FAQ
What is CVE-2022-40280?
CVE-2022-40280 is a vulnerability with a CVSS score of 7.5 (HIGH). An issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security/provisioning/src/provisioningdatabasemanager.c has a missing sqlite3_close after sqlite3_open_v2, leading...
How severe is CVE-2022-40280?
CVE-2022-40280 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-40280?
Check the references section above for vendor advisories and patch information. Affected products include: Samsung Tizenrt.