CVE-2021-36690

Katalog CVE

CVSS 7.5 · High EPSS 3,9%

Kerentanan pada sqlite, oracle zfs storage appliance kit +4 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally allowed to execute commands). This report does NOT imply any problem in the SQLite library.

Rincian

Terbit di NVD

24 Agustus 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

3,9% peluang dieksploitasi; lebih tinggi dari 90,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.sqlite.org/forum/forumpost/718c0a8d17 exploit · patch · advisory vendor
• http://seclists.org/fulldisclosure/2022/Oct/28 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/Oct/39 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/Oct/41 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/Oct/47 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/Oct/49 mailing list · advisory pihak ketiga
• https://support.apple.com/kb/HT213446 advisory pihak ketiga
• https://support.apple.com/kb/HT213486 advisory pihak ketiga
• https://support.apple.com/kb/HT213487 advisory pihak ketiga
• https://support.apple.com/kb/HT213488 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2024/09/msg00050.html