AZL-32297
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-32297.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-32297
- Upstream
- Published
- 2023-12-29T10:15:13Z
- Modified
- 2026-04-01T05:11:05.127451Z
- Severity
-
- 7.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
- Summary
- CVE-2023-7104 affecting package sqlite for versions less than 3.39.2-3
- Details
-
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.
- References