Описание
An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path
A flaw was found in SQLite. A local attacker can exploit this vulnerability by manipulating the Session Extension changeset concat/changegroup merge path. This allows the attacker to obtain sensitive information, leading to information disclosure.
Отчет
This flaw affects the SQLite Session Extension, an optional compile-time feature (SQLITE_ENABLE_SESSION) that is not enabled in all Red Hat SQLite builds. A local attacker who can supply a malformed changeset blob to an application using sqlite3changeset_concat() or the changegroup merge API can cause a small amount of adjacent memory to be disclosed in the output changeset. Red Hat Enterprise Linux 8 and early Red Hat Enterprise Linux 9 z-streams do not compile the Session Extension into their sqlite builds and are not affected. Builds that do include the Session Extension have not yet received the upstream fix.
Меры по смягчению последствий
Restrict processing of SQLite Session Extension changeset files to those from trusted, authenticated sources. Applications should validate or sanitize changeset blobs before passing them to sqlite3changeset_concat() or sqlite3changegroup_add(). No further mitigation is available until an update containing the upstream fix is released.
Ссылки на источники
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path
An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path
An issue in SQLite before Fossil check-in 869a51ae84df allows a local ...
EPSS
5.5 Medium
CVSS3