Lucene search

K
ubuntuUbuntuUSN-6566-1
HistoryJan 03, 2024 - 12:00 a.m.

SQLite vulnerabilities

2024-01-0300:00:00
ubuntu.com
27
sqlite
ubuntu
vulnerabilities
cve-2022-46908
cli
memory operations
sessions extension
denial of service

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.9%

Releases

  • Ubuntu 23.10
  • Ubuntu 23.04
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS

Packages

  • sqlite3 - C library that implements an SQL database engine

Details

It was discovered that SQLite incorrectly handled certain protection
mechanisms when using a CLI script with the --safe option, contrary to
expectations. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-46908)

It was discovered that SQLite incorrectly handled certain memory operations
in the sessions extension. A remote attacker could possibly use this issue
to cause SQLite to crash, resulting in a denial of service. (CVE-2023-7104)

Rows per page:
1-10 of 461