{"id":"CVE-2023-7104","title":"A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical","summary":"A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-122","CWE-119"],"vendor":"sqlite","product":"sqlite","affected":["sqlite <= 3.43.0","fedora = 38","fedora = 39"],"published":"2023-12-29","updated":"2026-10-14","sourceUpdated":"2026-10-14T23:17:21.387","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-7104","references":[{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/","label":"cna@vuldb.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/","label":"cna@vuldb.com"},{"url":"https://security.netapp.com/advisory/ntap-20240112-0008/","label":"cna@vuldb.com"},{"url":"https://sqlite.org/forum/forumpost/5bcbf4571c","label":"cna@vuldb.com"},{"url":"https://sqlite.org/src/info/0e4e7a05c4204b47","label":"cna@vuldb.com"},{"url":"https://vuldb.com/?ctiid.248999","label":"cna@vuldb.com"},{"url":"https://vuldb.com/?id.248999","label":"cna@vuldb.com"},{"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00050.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240112-0008/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sqlite.org/forum/forumpost/5bcbf4571c","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sqlite.org/src/info/0e4e7a05c4204b47","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://vuldb.com/?ctiid.248999","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://vuldb.com/?id.248999","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-000297.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-277137.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.01249,"epssPercentile":0.68791,"ingestedAt":"2026-10-15T00:02:07.136Z","exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2025-12-18T15:36:04.361685Z"},"slug":"CVE-2023-7104","body":"## Overview\n\nA vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.\n\n## Affected\n\n- `sqlite <= 3.43.0`\n- `fedora = 38`\n- `fedora = 39`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":30.3,"likelihood":0.2,"exploitation":12,"ransomware":0},"changes":[{"seq":221961,"id":"CVE-2023-7104","ts":1792039686822,"field":"exploit_available","old":"false","new":"true"}]}