Yüksek CVSS 7.5 PoC var
CVE-2021-36690: Sqlite: güvenlik açığı
Açıklama (NVD)
A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally allowed to execute commands). This report does NOT imply any problem in the SQLite library.
Özet bilgiler
- Ürün
- Sqlite Sqlite
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %3,90 (yüzdelik 90)
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| sqlite-sqlite | 3.36.0 | 3.36.0 | — |
| oracle-zfs-storage-appliance-kit | 8.8 | 8.8 | — |
| apple-iphone-os | — | — | 16.0 |
| apple-macos | — | — | 13.0 |
| apple-tvos | — | — | 16.0 |
| apple-watchos | — | — | 9.0 |
Kaynaklar
- NVD kaydı
- seclists.org
- seclists.org
- seclists.org
- seclists.org
- seclists.org
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- www.sqlite.org
- seclists.org
- seclists.org
- seclists.org
- seclists.org
- seclists.org
- lists.debian.org
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- www.sqlite.org
- cert-portal.siemens.com