CLSA-2024-1707917992 sqlite: Fix of CVE-2023-7104

🗓️ 14 Feb 2024 13:39:56Reported by GoogleType

osv🔗 osv.dev👁 4 Views

SQLite fix for CVE-2023-7104 addressing a heap-based buffer overflow in the sessionReadRecord function.

Reporter	Title	Published	Views	Family All 188
IBM Security Bulletins	Security Bulletin: A vulnerability in SQLite affects IBM Tivoli Composite Application Manager for Transactions (Response Time)	7 Oct 202415:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM webMethods API Management	25 Apr 202510:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	26 Mar 202504:11	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to arbitrary code execution due to RPM (CVE-2023-7104)	24 Apr 202422:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Use Case Manager app is vulnerable to using components with known vulnerabilities	15 Apr 202502:23	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Enterprise Certified Container UBI updates	7 Mar 202414:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to the Improper Restriction of Operations within the Bounds of a Memory Buffer in the RHEL UBI (CVE-2023-7104)	5 Aug 202420:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by Multiple Security Vulnerabilities	30 May 202411:23	–	ibm
Tenable Nessus	Amazon Linux 2023 : lemon, sqlite, sqlite-analyzer (ALAS2023-2024-490)	23 Jan 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : nspr, nspr-devel, nss (ALAS2023-2024-507)	6 Feb 202400:00	–	nessus

Source	Link
errata	www.errata.cloudlinux.com/centos8.4-els/CLSA-2024-1707917992.html

01 Jun 2026 00:33Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.15.5 - 7.3

CVSS 25.2

CVSS 35.5

EPSS0.01249

SSVC