PT-2021-2226 · Sqlite+3 · Sqlite+3

Published 2021-01-22 · Updated 2024-03-06 · CVE-2021-20227

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions SQLite (affected versions not specified)

Description A flaw was found in SQLite's SELECT query functionality, specifically in the src/select.c file. This issue allows an attacker capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2021-1135

ALT-PU-2021-3336

BDU:2021-01135

BIT-SQLITE-2021-20227

CVE-2021-20227

OESA-2021-1252

Affected Products

Alt Linux

Astra Linux

Sqlite

Ubuntu

References · 24

• https://bdu.fstec.ru/vul/2021-01135 · Security Note
• https://sqlite.org/releaselog/3_34_1.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-20227 · Vendor Advisory
• https://security.gentoo.org/glsa/202210-40 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-20227 · Vendor Advisory
• https://security.gentoo.org/glsa/202103-04 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2021-20227 · Vendor Advisory
• https://oracle.com//security-alerts/cpujul2021.html · Patch
• https://ubuntu.com/security/CVE-2021-20227?_ga=2.257077835.113542731.1612758940-997510329.1585215282 · Vendor Advisory
• https://oracle.com/security-alerts/cpuApr2021.html · Patch
• https://osv.dev/vulnerability/BIT-sqlite-2021-20227 · Vendor Advisory
• https://oracle.com/security-alerts/cpuoct2021.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-20227 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-20227 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2021-1252 · Vendor Advisory