Description
An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | sqlite3 | 3.36.0-2 | — |
| Debian 13 | sqlite3 | 3.36.0-2 | — |
| Debian 12 | sqlite3 | 3.36.0-2 | — |
Advisories 6
- SSA-398330 SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 Siemens ProductCERT · Oct 13, 2026
- ICSA-23-348-10 Siemens SIMATIC S7-1500 CISA ICS & IT advisories · Aug 12, 2025
- ICSA-23-222-05 Siemens RUGGEDCOM CROSSBOW CISA ICS & IT advisories · May 6, 2025
- WID-SEC-2023-1614 Tenable Security Nessus Network Monitor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 25, 2023
- SSA-472630 SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4 Siemens ProductCERT · Aug 8, 2023
- WID-SEC-2023-1395 NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jun 8, 2023
References
- https://www.sqlite.org/cves.html
- https://www.sqlite.org/forum/forumpost/d9fce1a89b
- https://github.com/Tsiming/Vulnerabilities/blob/main/SQLite/CVE-2021-31239
- FEDORA-2023-69264c19f9 vendor-advisory
- FEDORA-2023-5c477a04ca vendor-advisory
- https://security.netapp.com/advisory/ntap-20230609-0010/
- GLSA-202311-03 vendor-advisory