A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.
{
"cwe_ids": [
"CWE-122"
],
"unresolved_ranges": [
{
"source": "AFFECTED_FIELD",
"extracted_events": [
{
"last_affected": "3.0"
},
{
"last_affected": "3.1"
},
{
"last_affected": "3.2"
},
{
"last_affected": "3.3"
},
{
"last_affected": "3.4"
},
{
"last_affected": "3.5"
},
{
"last_affected": "3.6"
},
{
"last_affected": "3.7"
},
{
"last_affected": "3.8"
},
{
"last_affected": "3.9"
},
{
"last_affected": "3.10"
},
{
"last_affected": "3.11"
},
{
"last_affected": "3.12"
},
{
"last_affected": "3.13"
},
{
"last_affected": "3.14"
},
{
"last_affected": "3.15"
},
{
"last_affected": "3.16"
},
{
"last_affected": "3.17"
},
{
"last_affected": "3.18"
},
{
"last_affected": "3.19"
},
{
"last_affected": "3.20"
},
{
"last_affected": "3.21"
},
{
"last_affected": "3.22"
},
{
"last_affected": "3.23"
},
{
"last_affected": "3.24"
},
{
"last_affected": "3.25"
},
{
"last_affected": "3.26"
},
{
"last_affected": "3.27"
},
{
"last_affected": "3.28"
},
{
"last_affected": "3.29"
},
{
"last_affected": "3.30"
},
{
"last_affected": "3.31"
},
{
"last_affected": "3.32"
},
{
"last_affected": "3.33"
},
{
"last_affected": "3.34"
},
{
"last_affected": "3.35"
},
{
"last_affected": "3.36"
},
{
"last_affected": "3.37"
},
{
"last_affected": "3.38"
},
{
"last_affected": "3.39"
},
{
"last_affected": "3.40"
},
{
"last_affected": "3.41"
},
{
"last_affected": "3.42"
},
{
"last_affected": "3.43"
}
]
}
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/7xxx/CVE-2023-7104.json",
"cna_assigner": "VulDB"
}{
"cpe": "cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*",
"source": "CPE_FIELD",
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "3.43.0"
}
]
}