title: SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow
description: A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.
problem types: CWE-122 Heap-based Buffer Overflow
affected:
{
vendor: SQLite
product: SQLite3
versions:
version: 3.0, status: affected
version: 3.1, status: affected
version: 3.2, status: affected
version: 3.3, status: affected
version: 3.4, status: affected
version: 3.5, status: affected
version: 3.6, status: affected
version: 3.7, status: affected
version: 3.8, status: affected
version: 3.9, status: affected
version: 3.10, status: affected
version: 3.11, status: affected
version: 3.12, status: affected
version: 3.13, status: affected
version: 3.14, status: affected
version: 3.15, status: affected
version: 3.16, status: affected
version: 3.17, status: affected
version: 3.18, status: affected
version: 3.19, status: affected
version: 3.20, status: affected
version: 3.21, status: affected
version: 3.22, status: affected
version: 3.23, status: affected
version: 3.24, status: affected
version: 3.25, status: affected
version: 3.26, status: affected
version: 3.27, status: affected
version: 3.28, status: affected
version: 3.29, status: affected
version: 3.30, status: affected
version: 3.31, status: affected
version: 3.32, status: affected
version: 3.33, status: affected
version: 3.34, status: affected
version: 3.35, status: affected
version: 3.36, status: affected
version: 3.37, status: affected
version: 3.38, status: affected
version: 3.39, status: affected
version: 3.40, status: affected
version: 3.41, status: affected
version: 3.42, status: affected
version: 3.43, status: affected
modules: make alltest Handler
}
metrics:
cvssV3_1: [
version: 3.1
baseScore: 5.5
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
baseSeverity: MEDIUM
]