PT-2023-4867 · Unknown · Sqlite-Jdbc

4390C336 · Publicado 2023-05-23 · Atualizado 2023-11-10 · CVE-2023-32697

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions sqlite-jdbc versions 3.6.14.1 through 3.41.2.1

Description The issue is related to a remote code execution vulnerability via JDBC URL, which can be exploited by a remote attacker to execute arbitrary code. This is due to incorrect code generation management in the SQLite JDBC library.

Recommendations For versions 3.6.14.1 through 3.41.2.1, update to version 3.41.2.2 to resolve the issue. As a temporary workaround, consider restricting access to the JDBC URL to minimize the risk of exploitation.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

BDU:2023-05354

CVE-2023-32697

GHSA-6PHF-6H5G-97J2

OESA-2023-1792

Produtos afetados

Sqlite-Jdbc

Referências · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/32xxx/CVE-2023-32697.json · Exploit
• https://github.com/xerial/sqlite-jdbc/security/advisories/GHSA-6phf-6h5g-97j2 · Aviso do Fabricante
• https://github.com/xerial/sqlite-jdbc/releases/tag/3.41.2.2 · Nota
• https://github.com/xerial/sqlite-jdbc · Nota
• https://bdu.fstec.ru/vul/2023-05354 · Nota de Segurança
• https://osv.dev/vulnerability/OESA-2023-1792 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-32697 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2023-32697 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-32697 · Aviso do Fabricante
• https://t.me/cvenotify/51003 · Publicação no Telegram
• https://vuldb.com/ru/?id.229766 · Nota
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1792 · Nota
• https://osv.dev/vulnerability/GHSA-6phf-6h5g-97j2 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-32697 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-32697 · Nota de Segurança