Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3r49-2w65-cxgr

Опубликовано: 16 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.

A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.

EPSS

Процентиль: 4%
0.00018
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 4.7
ubuntu
около 2 лет назад

A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.

CVSS3: 4.7
redhat
больше 2 лет назад

A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.

CVSS3: 4.7
nvd
около 2 лет назад

A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.

CVSS3: 4.7
debian
около 2 лет назад

A heap use-after-free issue has been identified in SQLite in the jsonP ...

EPSS

Процентиль: 4%
0.00018
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-416