Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-45346

Опубликовано: 14 фев. 2022
Источник: nvd
CVSS3: 4.3
CVSS2: 4
EPSS Низкий

Описание

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain sensitive information. NOTE: The developer disputes this as a vulnerability stating that If you give SQLite a corrupted database file and submit a query against the database, it might read parts of the database that you did not intend or expect.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sqlite:sqlite:3.35.1:*:*:*:*:*:*:*
cpe:2.3:a:sqlite:sqlite:3.37.0:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

EPSS

Процентиль: 59%
0.00378
Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-401

Связанные уязвимости

CVSS3: 4.3
ubuntu
почти 4 года назад

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain sensitive information. NOTE: The developer disputes this as a vulnerability stating that If you give SQLite a corrupted database file and submit a query against the database, it might read parts of the database that you did not intend or expect.

CVSS3: 4.3
redhat
почти 5 лет назад

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain sensitive information. NOTE: The developer disputes this as a vulnerability stating that If you give SQLite a corrupted database file and submit a query against the database, it might read parts of the database that you did not intend or expect.

CVSS3: 4.3
debian
почти 4 года назад

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 an ...

CVSS3: 6.5
github
почти 4 года назад

A Memory Leak vulnerabilty exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicous user obtain sensitive information..

EPSS

Процентиль: 59%
0.00378
Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-401