3 matches found
CVE-2020-24736
CVE-2020-24736 describes a SQLite3 buffer overflow that can allow a local attacker to cause a denial of service. The vulnerability is documented for SQLite 3.27.1 and earlier. Connected advisories from MiracleLinux (AXSA-2023-6185:03), Alibaba Cloud Linux 3 (ALINUX3-SA-2023:0072), TencentOS Serve...
CVE-2022-43441
CVE-2022-43441 affects Ghost Foundation node-sqlite3 5.1.1, with a code execution vulnerability in the Statement Bindings functionality. A specially crafted Javascript input can lead to arbitrary code execution. Public details in the provided documents confirm the vulnerable component and impact ...
CVE-2022-21227
CVE-2022-21227 affects the sqlite3 package prior to 5.0.3. The vulnerability is a Denial of Service caused by improper input handling in toString, where passing a crafted Function object can cause the V8 engine to crash. Public documents consistently describe this DoS vector and note the affected...