Skip to content
This repository was archived by the owner on Apr 25, 2023. It is now read-only.
This repository was archived by the owner on Apr 25, 2023. It is now read-only.

Security alert [severity high] - libsqlite3-sys via C SQLite improperly validates array index  #455

@carlos-rian

Description

@carlos-rian

The latest possible version of libsqlite3-sys that can be installed is 0.22.2.

The earliest fixed version is 0.25.1.

image

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions