CPE Details
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:sqlite:sqlite:3.47.2:*:*:*:*:*:*:*
Informations
Vendor
sqliteProduct
sqliteVersion
3.47.2Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above. | 7.2 |
High |
||
| In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string (e.g., 2MB or more), an integer overflow occurs in calculating the size of the result buffer, and thus malloc may not allocate enough memory. | 7.5 |
High |
