| शीर्षक | SQLite SQLite3 3.8.7.2 to 3.43.0 buffer overflow |
|---|
| विवरण | A heap-buffer-overflow can be triggered by "make alltest" on SQLite from 3.8.7 to 3.43.0, because sqlite3session.c doesn't validate the length of the sessionInput. it allows an attacker to read out-of-bounds 8-bytes, and leak that value to the output record.
|
|---|
| स्रोत | ⚠️ https://sqlite.org/forum/forumpost/5bcbf4571c |
|---|
| उपयोगकर्ता | qbit (UID 60633) |
|---|
| सबमिशन | 25/12/2023 01:05 PM (3 साल पहले) |
|---|
| संयम | 25/12/2023 03:01 PM (2 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 248999 [SQLite SQLite3 तक 3.43.0 make alltest sqlite3session.c sessionReadRecord बफ़र ओवरफ़्लो] |
|---|
| अंक | 17 |
|---|