Lucene search

K
rosalinuxROSA LABROSA-SA-2023-2266
HistoryOct 22, 2023 - 5:45 a.m.

Advisory ROSA-SA-2023-2266

2023-10-2205:45:26
ROSA LAB
abf.rosalinux.ru
10
sqlite 3.41.2
rosa-chrome
vulnerability
unauthorized access
command line interface
implementation errors
protection mechanism
exploitation
fixed
dnf update.

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.0%

software: sqlite 3.41.2
OS: ROSA-CHROME

package_evr_string: sqlite-3.41.2-1.src.rpm

CVE-ID: CVE-2022-46908
BDU-ID: 2023-05686
CVE-Crit: MEDIUM
CVE-DESC.: A vulnerability in the command line interface of the SQLite database management system is related to implementation errors in the azAllowedFunctions protection mechanism. Exploitation of the vulnerability could allow an attacker to gain unauthorized access to forbidden user functions
CVE-STATUS: Fixed
CVE-REV: To close, run command: sudo dnf update sqlite

OSVersionArchitecturePackageVersionFilename
ROSAanynoarchsqlite< 3.41.2UNKNOWN