PatchFirst · Vulnérabilités récentes
Vulnérabilité publiée pour sqlcipher au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 2
Zetetic SQLCipher 4.x before 4.4.1 has a use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in sqlite3.c. A remote denial of service attack can be performed. For example, a SQL injection can be used to execute the crafted SQL command sequence. After that, some unexpected RAM data is read.
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.