Description
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SQLite SQLite3
3.0affected3.1affected3.2affected3.3affected3.4affected3.5affected3.6affected3.7affected3.8affected3.9affected3.10affected3.11affected3.12affected3.13affected3.14affected3.15affected3.16affected3.17affected3.18affected3.19affected3.20affected3.21affected3.22affected3.23affected3.24affected3.25affected3.26affected3.27affected3.28affected3.29affected3.30affected3.31affected3.32affected3.33affected3.34affected3.35affected3.36affected3.37affected3.38affected3.39affected3.40affected3.41affected3.42affected3.43affected
References
- https://vuldb.com/?id.248999 ↗
- https://vuldb.com/?ctiid.248999 ↗
- https://sqlite.org/forum/forumpost/5bcbf4571c ↗
- https://sqlite.org/src/info/0e4e7a05c4204b47 ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/ ↗
- https://security.netapp.com/advisory/ntap-20240112-0008/ ↗
- https://lists.debian.org/debian-lts-announce/2024/09/msg00050.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-000297.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-915275.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-277137.html ↗