← CVE Intelligence

CVE-2023-7104

SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow PUBLISHED

Description (CNA)

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.

Affected (CNA)

Vendor / productVersions
SQLite / SQLite3affected 3.0; affected 3.1; affected 3.2; affected 3.3; affected 3.4; affected 3.5; affected 3.6; affected 3.7; affected 3.8; affected 3.9; affected 3.10; affected 3.11; affected 3.12; affected 3.13; affected 3.14; affected 3.15; affected 3.16; affected 3.17; affected 3.18; affected 3.19; affected 3.20; affected 3.21; affected 3.22; affected 3.23; affected 3.24; affected 3.25; affected 3.26; affected 3.27; affected 3.28; affected 3.29; affected 3.30; affected 3.31; affected 3.32; affected 3.33; affected 3.34; affected 3.35; affected 3.36; affected 3.37; affected 3.38; affected 3.39; affected 3.40; affected 3.41; affected 3.42; affected 3.43

CWE

CWE-122

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.