Test Kennung:	1.3.6.1.4.1.25623.1.0.128120
Kategorie:	Buffer overflow
Titel:	SQLite 3.44.0 - 3.49.0 Multiple Vulnerabilities
Zusammenfassung:	SQLite is prone to multiple vulnerabilities.
Beschreibung:	Summary: SQLite is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - CVE-2025-29087: The concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string (e.g., 2MB or more), an integer overflow occurs in calculating the size of the result buffer, and thus malloc may not allocate enough memory. - CVE-2025-3277: An integer overflow can be triggered in SQLite `concat_ws()`function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~ 4GB can be triggered. This can result in arbitrary code execution. Affected Software/OS: SQLite versions 3.44.0 through 3.49.0. Solution: Update to version 3.49.1 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2025-29087 Common Vulnerability Exposure (CVE) ID: CVE-2025-3277
Copyright	Copyright (C) 2025 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.