A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sqlite-docUpgrade sqliteUpgrade sqlite-libsUpgrade lemonUpgrade sqlite-devel | Jan 18, 2024 | Dec 29, 2023 |
| Alpine Linux | — | Upgrade qt5-qtwebengineUpgrade sqliteUpgrade qt6-qtwebengine | Mar 26, 2024 | Dec 25, 2023 |
| Amazon Linux Ami 2 | — | Upgrade thunderbirdUpgrade nss-debuginfoUpgrade firefoxUpgrade nss-sysinitUpgrade nss-pkcs11-develUpgrade nss-toolsUpgrade thunderbird-debuginfoUpgrade firefox-debuginfoUpgrade nssUpgrade nss-devel | Jan 23, 2024 | Dec 29, 2023 |
| Amazon_linux_2023 | — | Upgrade nss-utilUpgrade nsprUpgrade nspr-develUpgrade polkit-debugsourceUpgrade nss-debuginfoUpgrade nss-softokn-develUpgrade polkit-debuginfoUpgrade nss-softoknUpgrade polkit-docsUpgrade nss-sysinitUpgrade nss-pkcs11-develUpgrade sqlite-tools-debuginfoUpgrade nss-toolsUpgrade sqlite-libs-debuginfoUpgrade polkitUpgrade sqlite-debugsourceUpgrade sqlite-debuginfoUpgrade sqlite-analyzerUpgrade nss-softokn-freeblUpgrade sqliteUpgrade nss-util-develUpgrade polkit-libs-debuginfoUpgrade nss-develUpgrade nss-debugsourceUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-libsUpgrade polkit-develUpgrade nss-util-debuginfoUpgrade nss-sysinit-debuginfoUpgrade nss-softokn-debuginfoUpgrade sqlite-docUpgrade lemon-debuginfoUpgrade sqlite-toolsUpgrade polkit-libsUpgrade nssUpgrade lemonUpgrade sqlite-develUpgrade nss-tools-debuginfoUpgrade nss-softokn-freebl-debuginfoUpgrade nspr-debuginfoUpgrade sqlite-tcl-debuginfoUpgrade nss-softokn-freebl-develUpgrade sqlite-tcl | Feb 17, 2025 | Dec 29, 2023 |
| Centos_linux | — | Upgrade lemon-debuginfoUpgrade sqliteUpgrade sqlite-libsUpgrade sqlite-develUpgrade sqlite-analyzer-debuginfoUpgrade lemonUpgrade sqlite-tcl-debuginfoUpgrade sqlite-docUpgrade sqlite-debugsourceUpgrade sqlite-debuginfoUpgrade sqlite-libs-debuginfoUpgrade sqlite-tools-debuginfo | Jan 16, 2024 | Dec 29, 2023 |
| Debian | — | Upgrade sqlite3 | Oct 2, 2024 | Dec 29, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade sqlite | Mar 13, 2024 | Dec 29, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade sqlite | Mar 13, 2024 | Dec 29, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade sqlite | May 31, 2024 | Dec 29, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sqlite-docUpgrade sqliteUpgrade sqlite-libsUpgrade sqlite-devel | Jul 23, 2024 | Dec 29, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade sqlite | Apr 9, 2024 | Dec 29, 2023 |
| Ibm Aix | — | Apply the fix or workaround for rpm_advisory2 | Apr 25, 2024 | Dec 29, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Feb 21, 2024 |
| Oracle_linux | — | Upgrade lemonUpgrade sqlite-libsUpgrade sqlite-develUpgrade sqliteUpgrade sqlite-doc | Jan 16, 2024 | Dec 29, 2023 |
| Redhat Openshift | — | Upgrade windows-machine-config-rhel9-operator | Jun 26, 2024 | Dec 29, 2023 |
| Redhat_linux | — | Upgrade sqlite-libs-debuginfoUpgrade lemon-debuginfoUpgrade lemonUpgrade sqlite-debugsourceUpgrade sqlite-libsUpgrade sqliteUpgrade sqlite-develUpgrade sqlite-docUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-debuginfoUpgrade sqlite-tools-debuginfoUpgrade sqlite-tcl-debuginfo | Jan 16, 2024 | Dec 29, 2023 |
| Rocky_linux | — | Upgrade sqlite-libsUpgrade sqlite-debugsourceUpgrade sqlite-libs-debuginfoUpgrade lemonUpgrade lemon-debuginfoUpgrade sqliteUpgrade sqlite-debuginfoUpgrade sqlite-devel | Mar 5, 2024 | Jan 16, 2024 |
| Ubuntu | — | Upgrade libsqlite3-tcl (Ubuntu Pro)Upgrade sqlite3 (Ubuntu Pro)Upgrade libsqlite3-0 (Ubuntu Pro)Upgrade libsqlite3-dev (Ubuntu Pro)Upgrade libsqlite3-0 | Jan 4, 2024 | Dec 29, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub