CVE-2023-7104 | SQLite SQLite3 up to 3.43.0 make alltest sqlite3session.c sessionReadRecord heap-based overflow (FEDORA-2024-210776b8c7 / Nessus ID 207951)

10月 1, 2024
6:57 am

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow.

The identification of this vulnerability is CVE-2023-7104. The attack can only be initiated within the local network. Furthermore, there is an exploit available.

It is recommended to apply a patch to fix this issue.

CVE-2023-7104 | SQLite SQLite3 up to 3.43.0 make alltest sqlite3session.c sessionReadRecord heap-based overflow (FEDORA-2024-210776b8c7 / Nessus ID 207951)

Elvescore.io

Recent Posts

CVE-2024-11852 – Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) WordPress Unauthenticated Data Access Vulnerability

CVE-2024-12884 – Codezips E-Commerce Website SQL Injection

CVE-2024-51463 – IBM i SSRF

CVE-2024-51464 – IBM Navigator for i Access Bypass Vulnerability

CVE-2024-12883 – Code-projects Job Recruitment Cross Site Scripting

CVE-2024-12875 – Easy Digital Downloads WordPress Directory Traversal Vulnerability

CVE-2023-7104 | SQLite SQLite3 up to 3.43.0 make alltest sqlite3session.c sessionReadRecord heap-based overflow (FEDORA-2024-210776b8c7 / Nessus ID 207951)

CVE-2023-7104 | SQLite SQLite3 up to 3.43.0 make alltest sqlite3session.c sessionReadRecord heap-based overflow (FEDORA-2024-210776b8c7 / Nessus ID 207951)