Out-of-bounds read in SQLite - CVE-2023-7104

Vulnerability identifier: #VU84985

CSH Severity: Medium

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2023-7104

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

Affected software:
SQLite
Amazon Linux AMI
IBM AIX
Fedora
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Brocade Fabric OS
Ubuntu
openEuler
IBM VIOS
Red Hat OpenShift Serverless
OpenShift Service Mesh
OpenShift Container Platform for Windows Containers
Multicluster Engine for Kubernetes
OpenShift Virtualization
OpenShift Data Foundation (formerly OpenShift Container Storage)
Red Hat OpenShift Builds
Migration Toolkit for Runtimes
Service Telemetry Framework
Service Interconnect
Cryostat
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Advanced Cluster Security for Kubernetes
OpenShift Logging
Submariner
Multicluster GlobalHub
Run Once Duration Override Operator for Red Hat OpenShift
Custom Metrics Autoscaler Operator for Red Hat OpenShift
Red Hat OpenShift distributed tracing (RHOSDT)
APEX Cloud Platform for Red Hat OpenShift
Red Hat OpenShift Dev Spaces
Use Case Manager App
App Connect Enterprise Certified Container
Red Hat Migration Toolkit for Applications
Tivoli Composite Application Manager for Transactions
IBM Security Verify Governance
Red Hat OpenStack
NetWorker
Telemetry Dashboard
Liquidware
webMethods Managed File Transfer
Citrix Workspace App
Webex App VDI
APEX Cloud Platform for Microsoft Azure
OpenManage Network Integration (OMNI)
Enterprise SONiC
Storage Resource Manager
Storage Ceph
Wyse Device Agent
OpenShift API for Data Protection (OADP)
Network Observability plugin for the Openshift Console
SmartFabric Storage Software
PowerProtect Cyber Recovery
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
Nessus Network Monitor
VMware Horizon Client
Red Hat OpenShift GitOps
IBM Qradar SIEM
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libsqlite3-dev (Ubuntu package)
libsqlite3-0 (Ubuntu package)
libsqlite3-tcl (Ubuntu package)
sqlite3 (Ubuntu package)
polkit
sqlite (Red Hat package)
sqlite-doc
lemon
sqlite-libs
sqlite-devel
sqlite
sqlite-help
sqlite-debugsource
sqlite-debuginfo
sqlite-tools
sqlite-tcl
sqlite-analyzer
nss
mozilla-crashreporter-firefox-debuginfo
firefox-debuginfo
firefox-debugsource
firefox
chromium
Cisco Jabber
Cisco Webex Meetings
Dell EMC Storage Monitoring and Reporting (SMR)
Juniper Secure Analytics (JSA)

The vulnerability allows a remote user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the sessionReadRecord() function in ext/session/sqlite3session.c when processing a corrupt changeset. A remote user can send a specially crafted request to trigger an out-of-bounds read error and read contents of memory on the system or perform a denial of service attack.

Install updates from vendor's website.

• https://vuldb.com/?id.248999
• https://vuldb.com/?ctiid.248999
• https://sqlite.org/forum/forumpost/5bcbf4571c
• https://sqlite.org/src/info/0e4e7a05c4204b47