All versions of package pg-native; all versions of package libpq are vulnerable to Denial of Service (DoS) when the addons attempt to cast the second argument to an array and fail. This happens for every non-array argument passed. **Note:** pg-native is a mere binding to npm's libpq library, which in turn has the addons and bindings to the actual C libpq library. This means that problems found in pg-native may transitively impact npm's libpq.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Libpq Project |
|
| Pg-native Project |
|
Configuration 1 [-]
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2022-6074 | All versions of package pg-native; all versions of package libpq are vulnerable to Denial of Service (DoS) when the addons attempt to cast the second argument to an array and fail. This happens for every non-array argument passed. **Note:** pg-native is a mere binding to npm's libpq library, which in turn has the addons and bindings to the actual C libpq library. This means that problems found in pg-native may transitively impact npm's libpq. |
 Github GHSA |
GHSA-j32j-2hxv-rqf7 | pg-native and libpq vulnerable to uncontrolled resource consumption |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: snyk
Published:
Updated: 2024-09-17T01:51:47.069Z
Reserved: 2022-02-24T00:00:00
Link: CVE-2022-25852
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-06-17T20:15:10.547
Modified: 2024-11-21T06:53:07.000
Link: CVE-2022-25852
Redhat
No data.
OpenCVE Enrichment
No data.