| 제목 | SQLite SQLite3 3.8.7.2 to 3.43.0 buffer overflow |
|---|
| 설명 | A heap-buffer-overflow can be triggered by "make alltest" on SQLite from 3.8.7 to 3.43.0, because sqlite3session.c doesn't validate the length of the sessionInput. it allows an attacker to read out-of-bounds 8-bytes, and leak that value to the output record.
|
|---|
| 원천 | ⚠️ https://sqlite.org/forum/forumpost/5bcbf4571c |
|---|
| 사용자 | qbit (UID 60633) |
|---|
| 제출 | 2023. 12. 25. PM 01:05 (3 연령 ago) |
|---|
| 모더레이션 | 2023. 12. 25. PM 03:01 (2 hours later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 248999 [SQLite SQLite3 까지 3.43.0 make alltest sqlite3session.c sessionReadRecord 메모리 손상] |
|---|
| 포인트들 | 17 |
|---|