A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-lemonalma-upgrade-sqlitealma-upgrade-sqlite-develalma-upgrade-sqlite-docalma-upgrade-sqlite-libs | Jan 18, 2024 | Dec 29, 2023 | |
| Alpine Linux | alpine-linux-upgrade-sqlitealpine-linux-upgrade-qt5-qtwebenginealpine-linux-upgrade-qt6-qtwebengine | Mar 26, 2024 | Dec 25, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-firefoxamazon-linux-ami-2-upgrade-firefox-debuginfoamazon-linux-ami-2-upgrade-nssamazon-linux-ami-2-upgrade-nss-debuginfoamazon-linux-ami-2-upgrade-nss-develamazon-linux-ami-2-upgrade-nss-pkcs11-develamazon-linux-ami-2-upgrade-nss-sysinitamazon-linux-ami-2-upgrade-nss-toolsamazon-linux-ami-2-upgrade-thunderbirdamazon-linux-ami-2-upgrade-thunderbird-debuginfo | Jan 23, 2024 | Dec 29, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-lemonamazon-linux-2023-upgrade-lemon-debuginfoamazon-linux-2023-upgrade-nspramazon-linux-2023-upgrade-nspr-debuginfoamazon-linux-2023-upgrade-nspr-develamazon-linux-2023-upgrade-nssamazon-linux-2023-upgrade-nss-debuginfoamazon-linux-2023-upgrade-nss-debugsourceamazon-linux-2023-upgrade-nss-develamazon-linux-2023-upgrade-nss-pkcs11-develamazon-linux-2023-upgrade-nss-softoknamazon-linux-2023-upgrade-nss-softokn-debuginfoamazon-linux-2023-upgrade-nss-softokn-develamazon-linux-2023-upgrade-nss-softokn-freeblamazon-linux-2023-upgrade-nss-softokn-freebl-debuginfoamazon-linux-2023-upgrade-nss-softokn-freebl-develamazon-linux-2023-upgrade-nss-sysinitamazon-linux-2023-upgrade-nss-sysinit-debuginfoamazon-linux-2023-upgrade-nss-toolsamazon-linux-2023-upgrade-nss-tools-debuginfoamazon-linux-2023-upgrade-nss-utilamazon-linux-2023-upgrade-nss-util-debuginfoamazon-linux-2023-upgrade-nss-util-develamazon-linux-2023-upgrade-polkitamazon-linux-2023-upgrade-polkit-debuginfoamazon-linux-2023-upgrade-polkit-debugsourceamazon-linux-2023-upgrade-polkit-develamazon-linux-2023-upgrade-polkit-docsamazon-linux-2023-upgrade-polkit-libsamazon-linux-2023-upgrade-polkit-libs-debuginfoamazon-linux-2023-upgrade-sqliteamazon-linux-2023-upgrade-sqlite-analyzeramazon-linux-2023-upgrade-sqlite-analyzer-debuginfoamazon-linux-2023-upgrade-sqlite-debuginfoamazon-linux-2023-upgrade-sqlite-debugsourceamazon-linux-2023-upgrade-sqlite-develamazon-linux-2023-upgrade-sqlite-docamazon-linux-2023-upgrade-sqlite-libsamazon-linux-2023-upgrade-sqlite-libs-debuginfoamazon-linux-2023-upgrade-sqlite-tclamazon-linux-2023-upgrade-sqlite-tcl-debuginfoamazon-linux-2023-upgrade-sqlite-toolsamazon-linux-2023-upgrade-sqlite-tools-debuginfo | Feb 17, 2025 | Dec 29, 2023 | |
| Centos_linux | — | centos-upgrade-lemoncentos-upgrade-lemon-debuginfocentos-upgrade-sqlitecentos-upgrade-sqlite-analyzer-debuginfocentos-upgrade-sqlite-debuginfocentos-upgrade-sqlite-debugsourcecentos-upgrade-sqlite-develcentos-upgrade-sqlite-doccentos-upgrade-sqlite-libscentos-upgrade-sqlite-libs-debuginfocentos-upgrade-sqlite-tcl-debuginfocentos-upgrade-sqlite-tools-debuginfo | Jan 16, 2024 | Dec 29, 2023 |
| Debian | debian-upgrade-sqlite3 | Oct 2, 2024 | Dec 29, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-sqlite | Mar 13, 2024 | Dec 29, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-sqlite | Mar 13, 2024 | Dec 29, 2023 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-sqlite | May 31, 2024 | Dec 29, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-sqlitehuawei-euleros-2_0_sp8-upgrade-sqlite-develhuawei-euleros-2_0_sp8-upgrade-sqlite-dochuawei-euleros-2_0_sp8-upgrade-sqlite-libs | Jul 23, 2024 | Dec 29, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-sqlite | Apr 9, 2024 | Dec 29, 2023 | |
| Ibm Aix | ibm-aix-rpm_advisory2 | Apr 25, 2024 | Dec 29, 2023 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Feb 21, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-lemonoracle-linux-upgrade-sqliteoracle-linux-upgrade-sqlite-develoracle-linux-upgrade-sqlite-docoracle-linux-upgrade-sqlite-libs | Jan 16, 2024 | Dec 29, 2023 |
| Redhat Openshift | linuxrpm-upgrade-openshift4-wincw-windows-machine-config-rhel9-operator | Jun 26, 2024 | Dec 29, 2023 | |
| Redhat_linux | redhat-upgrade-lemonredhat-upgrade-lemon-debuginforedhat-upgrade-sqliteredhat-upgrade-sqlite-analyzer-debuginforedhat-upgrade-sqlite-debuginforedhat-upgrade-sqlite-debugsourceredhat-upgrade-sqlite-develredhat-upgrade-sqlite-docredhat-upgrade-sqlite-libsredhat-upgrade-sqlite-libs-debuginforedhat-upgrade-sqlite-tcl-debuginforedhat-upgrade-sqlite-tools-debuginfo | Jan 16, 2024 | Dec 29, 2023 | |
| Rocky_linux | rocky-upgrade-lemonrocky-upgrade-lemon-debuginforocky-upgrade-sqliterocky-upgrade-sqlite-debuginforocky-upgrade-sqlite-debugsourcerocky-upgrade-sqlite-develrocky-upgrade-sqlite-libsrocky-upgrade-sqlite-libs-debuginfo | Mar 5, 2024 | Jan 16, 2024 | |
| Ubuntu | ubuntu-pro-upgrade-libsqlite3-0ubuntu-pro-upgrade-libsqlite3-devubuntu-pro-upgrade-libsqlite3-tclubuntu-pro-upgrade-sqlite3ubuntu-upgrade-libsqlite3-0 | Jan 4, 2024 | Dec 29, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Dec 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub