{"id":"CVE-2023-7104","revision":"a2cad32af02f44658d7044a2c3d595a2","records":[{"revision":"a2cad32af02f44658d7044a2c3d595a2","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2023-7104","aliases":[],"title":"SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow","description":"A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.","state":0,"publishedAt":"2023-12-25T21:00:05.997+00:00","modifiedAt":"2026-10-14T22:15:28.14+00:00","affected":[{"ecosystem":"Vendor product","name":"SQLite3","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"SQLite\",\n                    \"product\": \"SQLite3\",\n                    \"versions\": [\n                        {\n                            \"version\": \"3.0\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.5\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.6\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.7\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.8\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.9\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.10\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.11\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.12\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.13\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.14\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.15\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.16\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.17\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.18\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.19\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.20\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.21\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.22\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.23\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.24\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.25\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.26\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.27\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.28\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.29\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.30\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.31\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.32\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.33\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.34\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.35\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.36\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.37\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.38\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.39\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.40\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.41\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.42\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"3.43\",\n                            \"status\": \"affected\"\n                        }\n                    ],\n                    \"modules\": [\n                        \"make alltest Handler\"\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","score":5.5,"severity":"MEDIUM"},{"system":"CVSS 3.0","vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","score":5.5,"severity":"MEDIUM"},{"system":"CVSS 2.0","vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","score":5.2,"severity":null}],"references":["https://vuldb.com/?id.248999","https://vuldb.com/?ctiid.248999","https://sqlite.org/forum/forumpost/5bcbf4571c","https://sqlite.org/src/info/0e4e7a05c4204b47","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/","https://security.netapp.com/advisory/ntap-20240112-0008/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-7104","license":"CVE Program Terms of Use","key":"cve-program:CVE-2023-7104","identifiers":["CVE-2023-7104"]},"retained":false,"historicalAffected":[]}],"coverage":[]}