CVE-2021-31239 | BDVDB-2026-201805 Detail
SiemensRUGGEDCOM CROSSBOW
Description#
An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: network.
Weaknesses#
- CWE-125 Out-of-bounds Read
References#
- https://www.sqlite.org/cves.html
- https://www.sqlite.org/forum/forumpost/d9fce1a89b
- https://github.com/Tsiming/Vulnerabilities/blob/main/SQLite/CVE-2021-31239
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/
- https://security.netapp.com/advisory/ntap-20230609-0010/
- https://security.gentoo.org/glsa/202311-03
- https://cert-portal.siemens.com/productcert/html/ssa-472630.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.