The vulnerability of the SQLite database management system, related to writing data beyond the buffer boundaries in memory, allows an attacker to gain unauthorized access to protected information.

🗓️ 16 Feb 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

The SQLite vulnerability allows a memory buffer overrun that can lead to unauthorized access to protected data.

Reporter	Title	Published	Views	Family All 197
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities fixed in IBM Security Verify Access	7 Jan 202200:24	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability was identified and remediated in the IBM MaaS360 Cloud Extender (CVE-2020-15358)	13 Jan 202118:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
IBM Security Bulletins	Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment R esponse Time Monitoring Agent (CVE-2020-15358)	22 Sep 202002:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	2 Feb 202105:06	–	ibm
IBM Security Bulletins	Security Bulletin: WML CE: TensorFlow: In SQLite before 3.32.3, select.c mishandles query-flattener optimization	20 Jul 202020:12	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0111: sqlite (ALINUX3-SA-2022:0111)	14 May 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0121: mingw packages (ALINUX3-SA-2022:0121)	14 May 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0179: sqlite (ALINUX3-SA-2022:0179)	14 May 202500:00	–	nessus

Vulners

Node

OR

oracle outside_in_technologyMatch8.5.4

oracle enterprise_manager_ops_centerMatch12.4.0

oracle outside_in_technologyMatch8.5.5

oracle communications_network_charging_and_controlMatch6.0.1

oracle sun_zfs_storage_appliance_kitMatch8.8

oracle communications_network_charging_and_controlMatch12.0.2

oracle mysql_workbenchRange≤8.0.22

oracle hyperion_infrastructure_technologyMatch11.1.2.4

hipp_wyrick_company sqliteRange<3.32.3

apple icloudRange<7.21

kramer_electronics kramer_viaMatch4.0.1.1328

red_hat red_hat_enterprise_linuxMatch8

canonical ubuntuMatch20.04

Source	Link
sqlite	www.sqlite.org/src/info/10fa79d00f8091e5
sqlite	www.sqlite.org/src/timeline
sqlite	www.sqlite.org/src/tktview
support	www.support.apple.com/kb/HT211843
support	www.support.apple.com/kb/HT211844
support	www.support.apple.com/kb/HT211847
support	www.support.apple.com/kb/HT211850
support	www.support.apple.com/kb/HT211931
support	www.support.apple.com/kb/HT212147
oracle	www.oracle.com/security-alerts/cpujan2021.html

31 Aug 2023 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.6

CVSS 35.5

EPSS0.01027

SQLite vulnerability Memory buffer overrun Unauthorized data access Database security Protected information risk