Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-45346

Опубликовано: 14 фев. 2022
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 4
CVSS3: 4.3

Описание

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain sensitive information. NOTE: The developer disputes this as a vulnerability stating that If you give SQLite a corrupted database file and submit a query against the database, it might read parts of the database that you did not intend or expect.

РелизСтатусПримечание
bionic

not-affected

see notes
devel

DNE

esm-apps-legacy/xenial

not-affected

see notes
esm-apps/bionic

not-affected

see notes
esm-apps/focal

not-affected

see notes
esm-apps/jammy

not-affected

see notes
esm-apps/xenial

not-affected

see notes
esm-infra-legacy/trusty

not-affected

see notes
focal

not-affected

see notes
impish

not-affected

see notes

Показывать по

РелизСтатусПримечание
bionic

not-affected

see notes
devel

not-affected

see notes
esm-infra-legacy/trusty

not-affected

see notes
esm-infra-legacy/xenial

not-affected

see notes
esm-infra/bionic

not-affected

see notes
esm-infra/focal

not-affected

see notes
esm-infra/xenial

not-affected

see notes
focal

not-affected

see notes
impish

not-affected

see notes
jammy

not-affected

see notes

Показывать по

EPSS

Процентиль: 74%
0.01614
Низкий

4 Medium

CVSS2

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
redhat
больше 5 лет назад

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain sensitive information. NOTE: The developer disputes this as a vulnerability stating that If you give SQLite a corrupted database file and submit a query against the database, it might read parts of the database that you did not intend or expect.

CVSS3: 4.3
nvd
больше 4 лет назад

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain sensitive information. NOTE: The developer disputes this as a vulnerability stating that If you give SQLite a corrupted database file and submit a query against the database, it might read parts of the database that you did not intend or expect.

CVSS3: 4.3
debian
больше 4 лет назад

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 an ...

CVSS3: 6.5
github
больше 4 лет назад

A Memory Leak vulnerabilty exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicous user obtain sensitive information..

EPSS

Процентиль: 74%
0.01614
Низкий

4 Medium

CVSS2

4.3 Medium

CVSS3