CVE-2023-32697

2023-05-2323:15:09

Debian Security Bug Tracker

security-tracker.debian.org

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

75.3%

JSON

SQLite JDBC is a library for accessing and creating SQLite database files in Java. Sqlite-jdbc addresses a remote code execution vulnerability via JDBC URL. This issue impacting versions 3.6.14.1 through 3.41.2.1 and has been fixed in version 3.41.2.2.

OSVersionArchitecturePackageVersionFilename
Debian12allxerial-sqlite-jdbc< 3.40.1.0+dfsg-1+deb12u1xerial-sqlite-jdbc_3.40.1.0+dfsg-1+deb12u1_all.deb
Debian999allxerial-sqlite-jdbc< 3.42.0.0+dfsg-1xerial-sqlite-jdbc_3.42.0.0+dfsg-1_all.deb
Debian13allxerial-sqlite-jdbc< 3.42.0.0+dfsg-1xerial-sqlite-jdbc_3.42.0.0+dfsg-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	xerial-sqlite-jdbc	< 3.40.1.0+dfsg-1+deb12u1	xerial-sqlite-jdbc_3.40.1.0+dfsg-1+deb12u1_all.deb
Debian	999	all	xerial-sqlite-jdbc	< 3.42.0.0+dfsg-1	xerial-sqlite-jdbc_3.42.0.0+dfsg-1_all.deb
Debian	13	all	xerial-sqlite-jdbc	< 3.42.0.0+dfsg-1	xerial-sqlite-jdbc_3.42.0.0+dfsg-1_all.deb