Medium ELSA-2023-0110 1 CVE

Moderate: sqlite security update (Oracle Linux 8)

Published Jan 12, 2023 · Updated Jan 12, 2023

Ecosystem: Oracle Linux

Summary

[3.26.0-17]
- Fixed CVE-2022-35737

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 8	lemon	0:3.26.0-17.el8_7
Oracle Linux · 8	sqlite	0:3.26.0-17.el8_7
Oracle Linux · 8	sqlite-devel	0:3.26.0-17.el8_7
Oracle Linux · 8	sqlite-doc	0:3.26.0-17.el8_7
Oracle Linux · 8	sqlite-libs	0:3.26.0-17.el8_7

Vulnerabilities 1

High 7.5

CVE-2022-35737 Public exploit EPSS 24%

`libsqlite3-sys` via C SQLite improperly validates array index

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

qt5-qtwebengine sqlite3 sqlite3 sqlite Debian Ubuntu Azure Linux Alpine crates.io

Aug 3, 2022