Veracode Vulnerability DatabaseVERACODE:40457Denial Of Services (DoS)
0.004 Low
EPSS
Percentile
72.7%
sqlite3 is vulnerable to Denial Of Services (DoS). The vulnerability exists due to a segmentation fault in appendvfs.c, which allows an attacker to cause an application crash through a malicious input.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sqlite3 | le | 3.35.5 | |
| sqlite3:sid | eq | 3.33.0-1 | |
| sqlite3 | le | 3.35.5 | |
| sqlite3:sid | eq | 3.33.0-1 |
References
github.com/advisories/GHSA-mv5m-45gv-gh97
github.com/sqlite/sqlite/commit/6536c4f18e3dd37084c902f965631ff28248d8c7
github.com/Tsiming/Vulnerabilities/blob/main/SQLite/CVE-2021-31239
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/
lists.fedoraproject.org/archives/list/[email protected]/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/
lists.fedoraproject.org/archives/list/[email protected]/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/
security.gentoo.org/glsa/202311-03
security.netapp.com/advisory/ntap-20230609-0010/
www.sqlite.org/cves.html
www.sqlite.org/forum/forumpost/d9fce1a89b
Related
