CVE-2023-7104

HIGH EPSS 65.7%
Published Dec 29, 20232y ago · Modified Jun 17, 20262w ago
7.3 CVSS 3.1
High
Find Similar
Published Dec 29, 2023 2y ago
Last Modified Jun 17, 2026 2w ago

Description

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.

CVSS Details

Base Score
7.3
Exploitability
3.9
Impact
3.4
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity Low
Availability Low

Threat Intelligence

EPSS Exploit Probability
65.7% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 2

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer Memory Safety
CWE-122

Affected Products 3

VendorProductVersionRange
sqlitesqlite* ≤3.43.0
fedoraprojectfedora38any
fedoraprojectfedora39any

References 8

  • lists.debian.org https://lists.debian.org/debian-lts-announce/2024/09/msg00050.html
  • lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/
    Issue TrackingThird Party Advisory
  • lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/
    Issue TrackingThird Party Advisory
  • security.netapp.com https://security.netapp.com/advisory/ntap-20240112-0008/
  • sqlite.org https://sqlite.org/forum/forumpost/5bcbf4571c
    Exploit
  • sqlite.org https://sqlite.org/src/info/0e4e7a05c4204b47
    Patch
  • vuldb.com https://vuldb.com/?ctiid.248999
    Permissions Required
  • vuldb.com https://vuldb.com/?id.248999
    Third Party Advisory

Remediation

  • sqlite.org https://sqlite.org/src/info/0e4e7a05c4204b47
    Patch