F5F5:K000138425

HistoryJan 31, 2024 - 12:00 a.m.

K000138425 : SQLite vulnerability CVE-2023-7104

2024-01-3100:00:00

my.f5.com

sqlite3

critical vulnerability

heap-based buffer overflow

patch

vdb-248999

f5 products.

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.4%

JSON

Security Advisory Description

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999. (CVE-2023-7104)

Impact

There is no impact; F5 products are not affected by this vulnerability.

CPENameOperatorVersion
f5 ssl orchestratoreq15.1.0
f5 ssl orchestratoreq15.1.1
f5 ssl orchestratoreq15.1.9
f5 ssl orchestratoreq16.1.0
f5 ssl orchestratoreq16.1.1
f5 ssl orchestratoreq16.1.3
f5 ssl orchestratoreq16.1.4
f5 ssl orchestratoreq17.1.0
f5 ssl orchestratoreq17.1.1
big-ip next cgnat cnfeq1.1.0

Name	Operator	Version
f5 ssl orchestrator	eq	15.1.0
f5 ssl orchestrator	eq	15.1.1
f5 ssl orchestrator	eq	15.1.9
f5 ssl orchestrator	eq	16.1.0
f5 ssl orchestrator	eq	16.1.1
f5 ssl orchestrator	eq	16.1.3
f5 ssl orchestrator	eq	16.1.4
f5 ssl orchestrator	eq	17.1.0
f5 ssl orchestrator	eq	17.1.1
big-ip next cgnat cnf	eq	1.1.0

Rows per page:

1-10 of 3961

K000138425 : SQLite vulnerability CVE-2023-7104

Related