ZeroHour

CVE-2021-36690

PoC
CVSS 3.1
7.5 high
EPSS
4%p90
Published
()
Modified
Description

A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally allowed to execute commands). This report does NOT imply any problem in the SQLite library.

Vendors
sqliteoracleapple
Products
sqlite, zfs storage appliance kit, iphone os, macos, tvos, watchos
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.