Moderate: sqlite security update
Summary
RLSA-2023:0339: Moderate: sqlite security update. Affects sqlite versions < 0:3.34.1-6.el9_1. Fixed in 0:3.34.1-6.el9_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
SQLite is a C library that implements an SQL database engine. It provides a convenient and easy-to-use API for applications to utilize an SQL database without the need for a separate database server. The package 'sqlite' in Rocky Linux:9 is affected by a moderate security vulnerability.
Vulnerability Detail
The vulnerability (CVE-2022-35737) in SQLite is an array-bounds overflow that occurs when billions of bytes are used in a string argument to a C API. This vulnerability can potentially lead to arbitrary code execution or denial of service attacks. The CVSS score for this vulnerability is 5.9, indicating a moderate severity.
How To Fix
Minimum fixed version
0:3.34.1-6.el9_1
This is the first release that contains the fix.
sudo dnf update sqliteTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, the 'sqlite' package in Rocky Linux:9 is affected by a moderate security vulnerability (CVE-2022-35737) that can lead to arbitrary code execution or denial of service attacks. It is crucial to update the package to version 3.34.1-6.el9_1 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for sqlite →
FAQ
SQLite is a C library that implements an SQL database engine, providing a convenient way to use an SQL database within applications.
The vulnerability can potentially lead to arbitrary code execution or denial of service attacks.
The CVSS score for this vulnerability is 5.9, indicating a moderate severity.
To fix this vulnerability, update the 'sqlite' package to version 3.34.1-6.el9_1 or later.
No specific workaround has been provided for this vulnerability. It is recommended to update the package to the fixed version.
Related vulnerabilities
Recent vulnerabilities recorded for sqlite.
