CVE-2023-7104
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical.
Published Dec 29, 2023 · updated Oct 14, 2026 · sqlite sqlite
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.
Timeline
Detection, updates, and resolution for this record.
Dec 29, 2023 · NIST NVD
Detected
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.
Oct 14, 2026 · NIST NVD
Updated
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.
Affected
- cpe fedoraproject/fedora38
- cpe fedoraproject/fedora39
- cpe sqlite/sqliteversion unspecified
Sources
- CVE.orgCVE-2023-7104
Official CVE identifier
cve.org - FIRST EPSSCVE-2023-7104
30-day exploitation probability 1.2%
first.org - NIST NVDCVE-2023-7104
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recom
nvd.nist.gov