Medium ELSA-2023-0339 1 CVE

Moderate: sqlite security update (Oracle Linux 9)

Published Jan 24, 2023 · Updated Jan 24, 2023

Ecosystem: Oracle Linux

Summary

[3.34.1-6]
- Fixes CVE-2022-35737

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 9	sqlite	0:3.34.1-6.el9_1
Oracle Linux · 9	sqlite-devel	0:3.34.1-6.el9_1
Oracle Linux · 9	sqlite-libs	0:3.34.1-6.el9_1

Vulnerabilities 1

High 7.5

CVE-2022-35737 Public exploit EPSS 24%

`libsqlite3-sys` via C SQLite improperly validates array index

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

qt5-qtwebengine sqlite3 sqlite3 sqlite Debian Ubuntu Azure Linux Alpine crates.io

Aug 3, 2022