Skip to content
5.5 Medium

CVE-2023-7104 A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical

Description

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.

Affected products and versions

Product Affected versions Fixed in
SQLite3 3.43 No fix stated
SQLite3 3.42 No fix stated
SQLite3 3.41 No fix stated
SQLite3 3.40 No fix stated
SQLite3 3.39 No fix stated
SQLite3 3.38 No fix stated
SQLite3 3.37 No fix stated
SQLite3 3.36 No fix stated
SQLite3 3.35 No fix stated
Show the 38 other branches
Product Affected versions Fixed in
SQLite3 3.34 No fix stated
SQLite3 3.33 No fix stated
SQLite3 3.32 No fix stated
SQLite3 3.31 No fix stated
SQLite3 3.30 No fix stated
SQLite3 3.29 No fix stated
SQLite3 3.28 No fix stated
SQLite3 3.27 No fix stated
SQLite3 3.26 No fix stated
SQLite3 3.25 No fix stated
SQLite3 3.24 No fix stated
SQLite3 3.23 No fix stated
SQLite3 3.22 No fix stated
SQLite3 3.21 No fix stated
SQLite3 3.20 No fix stated
SQLite3 3.19 No fix stated
SQLite3 3.18 No fix stated
SQLite3 3.17 No fix stated
SQLite3 3.16 No fix stated
SQLite3 3.15 No fix stated
SQLite3 3.14 No fix stated
SQLite3 3.13 No fix stated
SQLite3 3.12 No fix stated
SQLite3 3.11 No fix stated
SQLite3 3.10 No fix stated
SQLite3 3.9 No fix stated
SQLite3 3.8 No fix stated
SQLite3 3.7 No fix stated
SQLite3 3.6 No fix stated
SQLite3 3.5 No fix stated
SQLite3 3.4 No fix stated
SQLite3 3.3 No fix stated
SQLite3 3.2 No fix stated
SQLite3 3.1 No fix stated
SQLite3 3.0 No fix stated
RUGGEDCOM CROSSBOW Station Access Controller (SAC) 5.6 earliest → < 5.6 5.6
SIDIS Prime 4.0 earliest → < 4.0.700 4.0.700
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 earliest → < 1.1 1.1

References

Timeline

  1. Published
  2. Last modified
Track this CVE