CVE-2023-7104 — SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow

Affected: SQLite3

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.

USN-6566-1 — sqlite3 vulnerabilities

Affected: Ubuntu:20.04:LTS: sqlite3, Ubuntu:22.04:LTS: sqlite3

It was discovered that SQLite incorrectly handled certain protection mechanisms when using a CLI script with the --safe option, contrary to expectations. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-46908)

It was discovered that SQLite incorrectly handled certain memory operations in the sessions extension. A remote attacker could possibly use this issue to cause SQLite to crash, resulting in a denial of service. (CVE-2023-7104)

Most recent entries from all

CVE-2023-7104 — SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow

USN-6566-1 — sqlite3 vulnerabilities