Moderate: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

OESA-2024-1063 sqlite security update

SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...

OESA-2024-1058 firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes: A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function...

SUSE CVE-2024-0232

A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service...

Important Photon OS Security Update - PHSA-2024-3.0-0712

Updates of 'sqlite', 'libssh' packages of Photon OS have been released...

CVE-2024-0232

A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service...

SQLite < 3.43.1 Buffer Overflow Vulnerability

SQLite is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sqlite:sqlite"; ifdescription...

Important Photon OS Security Update - PHSA-2024-4.0-0546

Updates of 'sqlite' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-5.0-91-0188

Updates of 'erlang', 'libssh2', 'sqlite', 'openssh' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-5.0-0188

Updates of 'sqlite', 'openssh', 'erlang', 'libssh2' packages of Photon OS have been released...

CVE-2024-0342

A vulnerability classified as critical has been found in Inis up to 2.0.1. Affected is an unknown function of the file /app/api/controller/default/Sqlite.php. The manipulation of the argument sql leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-250110 is t...

Inis SQL Injection Vulnerability

Inis is a web application. Inis version 2.0.1 suffers from a SQL injection vulnerability that stems from the parameter sql in the file /app/api/controller/default/Sqlite.php that can lead to SQL injection...

CBL Mariner 2.0 Security Update: sqlite (CVE-2022-35737)

The version of sqlite installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-35737 advisory. - SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes ar...

SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow

...

Fedora 38 : chromium (2024-a6c2300bca)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a6c2300bca advisory. update to 120.0.6099.199 - CVE-2023-6879 aom: heap-buffer-overflow on frame size change - CVE-2023-7104 sqlite: heap-buffer-overflow at sessionfuzz ...

USN-6566-1: SQLite vulnerabilities

It was discovered that SQLite incorrectly handled certain protection mechanisms when using a CLI script with the --safe option, contrary to expectations. This issue only affected Ubuntu 22.04 LTS. CVE-2022-46908 It was discovered that SQLite incorrectly handled certain memory operations in the...

USN-6566-1 sqlite3 vulnerabilities

It was discovered that SQLite incorrectly handled certain protection mechanisms when using a CLI script with the --safe option, contrary to expectations. This issue only affected Ubuntu 22.04 LTS. CVE-2022-46908 It was discovered that SQLite incorrectly handled certain memory operations in the...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : SQLite vulnerabilities (USN-6566-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6566-1 advisory. It was discovered that SQLite incorrectly handled certain protection mechanisms when using a CLI script with the --safe optio...

SQLite report about CVE-2024-0232

An attacker who can inject arbitrary SQL statements into an application might be able to provoke a use-after-free bug in SQLite's JSON parser that can in theory lead to an application crash and denial of service. See forum thread b25edc1d4662 for the bug report...

SUSE CVE-2023-7104

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a...