Red Hat Security AdvisoryRHSA-2024:0425
sqlite security update
Released 2024-01-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.8.6) lemon-3.26.0-16.el8_6.1
- Red Hat Enterprise Linux BaseOS EUS (v.8.6) sqlite-3.26.0-16.el8_6.1, sqlite-devel-3.26.0-16.el8_6.1, sqlite-doc-3.26.0-16.el8_6.1 +1
Fixes 2 records
Priority HIGH 72
SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.23575 · Published 2022-08-03 · Partial fix · 0.25.1 CWE-129
Priority LOW 25
Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a denial of service via a crafted script.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00323 · Published 2023-04-11 · Partial fix CWE-120
