An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path
Weakness
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Red Hat Hardened Images | RedHat | sqlite-main-3.53.2-1.hum1 | * |
| Sqlite | Ubuntu | upstream | * |
| Sqlite3 | Ubuntu | jammy | * |
| Sqlite3 | Ubuntu | noble | * |
| Sqlite3 | Ubuntu | questing | * |
| Sqlite3 | Ubuntu | resolute | * |
| Sqlite3 | Ubuntu | upstream | * |