CVE-2023-7104
Fixed in a distro release EPSS 1%CVSS 5.5
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.
Products: SQLite3, Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC), Siemens SIDIS Prime, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | lemon | 3.26.0-19.el8_9 |
| AlmaLinux 8 | sqlite | 3.26.0-19.el8_9 |
| AlmaLinux 8 | sqlite-devel | 3.26.0-19.el8_9 |
| AlmaLinux 8 | sqlite-doc | 3.26.0-19.el8_9 |
| AlmaLinux 8 | sqlite-libs | 3.26.0-19.el8_9 |
| AlmaLinux 9 | sqlite | 3.34.1-7.el9_3 |
| AlmaLinux 9 | sqlite-devel | 3.34.1-7.el9_3 |
| AlmaLinux 9 | sqlite-libs | 3.34.1-7.el9_3 |
| Alpine 3.16 | sqlite | 3.40.1-r1 |
| Alpine 3.17 | sqlite | 3.40.1-r1 |
| Alpine 3.18 | sqlite | 3.41.2-r3 |
| Debian 11 | sqlite3 | 3.34.1-3+deb11u1 |
| Debian 12 | sqlite3 | 3.40.1-2+deb12u1 |
| Debian 13 | sqlite3 | 3.43.1-1 |
| Debian 14 | sqlite3 | 3.43.1-1 |
| Red Hat Enterprise Linux 8 | lemon | 0:3.26.0-19.el8_9 |
| Red Hat Enterprise Linux 8 | lemon-debuginfo | 0:3.26.0-19.el8_9 |
| Red Hat Enterprise Linux 8 | sqlite | 0:3.26.0-19.el8_9 |
| Red Hat Enterprise Linux 8 | sqlite-analyzer-debuginfo | 0:3.26.0-19.el8_9 |
| Red Hat Enterprise Linux 8 | sqlite-debuginfo | 0:3.26.0-19.el8_9 |
| Red Hat Enterprise Linux 8 | sqlite-debugsource | 0:3.26.0-19.el8_9 |
| Red Hat Enterprise Linux 8 | sqlite-devel | 0:3.26.0-19.el8_9 |
| Red Hat Enterprise Linux 8 | sqlite-doc | 0:3.26.0-19.el8_9 |
| Red Hat Enterprise Linux 8 | sqlite-libs | 0:3.26.0-19.el8_9 |
| Red Hat Enterprise Linux 8 | sqlite-libs-debuginfo | 0:3.26.0-19.el8_9 |
| Red Hat Enterprise Linux 8 | sqlite-tcl-debuginfo | 0:3.26.0-19.el8_9 |
| Red Hat Enterprise Linux 9 | lemon-debuginfo | 0:3.34.1-7.el9_3 |
| Red Hat Enterprise Linux 9 | sqlite | 0:3.34.1-7.el9_3 |
| Red Hat Enterprise Linux 9 | sqlite-analyzer-debuginfo | 0:3.34.1-7.el9_3 |
| Red Hat Enterprise Linux 9 | sqlite-debuginfo | 0:3.34.1-7.el9_3 |
| Red Hat Enterprise Linux 9 | sqlite-debugsource | 0:3.34.1-7.el9_3 |
| Red Hat Enterprise Linux 9 | sqlite-devel | 0:3.34.1-7.el9_3 |
| Red Hat Enterprise Linux 9 | sqlite-libs | 0:3.34.1-7.el9_3 |
| Red Hat Enterprise Linux 9 | sqlite-libs-debuginfo | 0:3.34.1-7.el9_3 |
| Red Hat Enterprise Linux 9 | sqlite-tcl-debuginfo | 0:3.34.1-7.el9_3 |
| Red Hat Enterprise Linux 9 | sqlite-tools-debuginfo | 0:3.34.1-7.el9_3 |
| Red Hat rhel eus 8.6 | lemon | 0:3.26.0-16.el8_6.2 |
| Red Hat rhel eus 8.6 | lemon-debuginfo | 0:3.26.0-16.el8_6.2 |
| Red Hat rhel eus 8.6 | sqlite | 0:3.26.0-16.el8_6.2 |
| Red Hat rhel eus 8.6 | sqlite-analyzer-debuginfo | 0:3.26.0-16.el8_6.2 |
| Red Hat rhel eus 8.6 | sqlite-debuginfo | 0:3.26.0-16.el8_6.2 |
| Red Hat rhel eus 8.6 | sqlite-debugsource | 0:3.26.0-16.el8_6.2 |
| Red Hat rhel eus 8.6 | sqlite-devel | 0:3.26.0-16.el8_6.2 |
| Red Hat rhel eus 8.6 | sqlite-doc | 0:3.26.0-16.el8_6.2 |
| Red Hat rhel eus 8.6 | sqlite-libs | 0:3.26.0-16.el8_6.2 |
| Red Hat rhel eus 8.6 | sqlite-libs-debuginfo | 0:3.26.0-16.el8_6.2 |
| Red Hat rhel eus 8.6 | sqlite-tcl-debuginfo | 0:3.26.0-16.el8_6.2 |
| Red Hat rhel eus 8.8 | lemon | 0:3.26.0-18.el8_8.1 |
| Red Hat rhel eus 8.8 | lemon-debuginfo | 0:3.26.0-18.el8_8.1 |
| Red Hat rhel eus 8.8 | sqlite | 0:3.26.0-18.el8_8.1 |
| Red Hat rhel eus 8.8 | sqlite-analyzer-debuginfo | 0:3.26.0-18.el8_8.1 |
| Red Hat rhel eus 8.8 | sqlite-debuginfo | 0:3.26.0-18.el8_8.1 |
| Red Hat rhel eus 8.8 | sqlite-debugsource | 0:3.26.0-18.el8_8.1 |
| Red Hat rhel eus 8.8 | sqlite-devel | 0:3.26.0-18.el8_8.1 |
| Red Hat rhel eus 8.8 | sqlite-doc | 0:3.26.0-18.el8_8.1 |
| Red Hat rhel eus 8.8 | sqlite-libs | 0:3.26.0-18.el8_8.1 |
| Red Hat rhel eus 8.8 | sqlite-libs-debuginfo | 0:3.26.0-18.el8_8.1 |
| Red Hat rhel eus 8.8 | sqlite-tcl-debuginfo | 0:3.26.0-18.el8_8.1 |
| Red Hat rhel eus 9.2 | lemon-debuginfo | 0:3.34.1-6.el9_2.1 |
| Red Hat rhel eus 9.2 | sqlite | 0:3.34.1-6.el9_2.1 |
| Red Hat rhel eus 9.2 | sqlite-analyzer-debuginfo | 0:3.34.1-6.el9_2.1 |
| Red Hat rhel eus 9.2 | sqlite-debuginfo | 0:3.34.1-6.el9_2.1 |
| Red Hat rhel eus 9.2 | sqlite-debugsource | 0:3.34.1-6.el9_2.1 |
| Red Hat rhel eus 9.2 | sqlite-devel | 0:3.34.1-6.el9_2.1 |
| Red Hat rhel eus 9.2 | sqlite-libs | 0:3.34.1-6.el9_2.1 |
| Red Hat rhel eus 9.2 | sqlite-libs-debuginfo | 0:3.34.1-6.el9_2.1 |
| Red Hat rhel eus 9.2 | sqlite-tcl-debuginfo | 0:3.34.1-6.el9_2.1 |
| Red Hat rhel eus 9.2 | sqlite-tools-debuginfo | 0:3.34.1-6.el9_2.1 |
| Rocky Linux 8 | sqlite | 0:3.26.0-19.el8_9 |
| Rocky Linux 9 | sqlite | 0:3.34.1-7.el9_3 |
| Ubuntu 20.04 LTS | sqlite3 | 3.31.1-4ubuntu0.6 |
| Ubuntu 22.04 LTS | sqlite3 | 3.37.2-2ubuntu0.3 |
| Ubuntu Pro 18.04 LTS | sqlite3 | 3.22.0-1ubuntu0.7+esm1 |