CVE-2023-7104

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.

• CWE-122
• CWE-119

• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/Issue Tracking, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20240112-0008/
• https://sqlite.org/forum/forumpost/5bcbf4571cExploit
• https://sqlite.org/src/info/0e4e7a05c4204b47Patch
• https://vuldb.com/?ctiid.248999Permissions Required
• https://vuldb.com/?id.248999Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/09/msg00050.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/Issue Tracking, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20240112-0008/
• https://sqlite.org/forum/forumpost/5bcbf4571cExploit
• https://sqlite.org/src/info/0e4e7a05c4204b47Patch
• https://vuldb.com/?ctiid.248999Permissions Required
• https://vuldb.com/?id.248999Third Party Advisory

Published

Dec 29, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-7098** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified a…5.3
• CVE-2023-7099A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-7100A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-7101Spreadsheet::ParseExcel version 0.65 is a Perl module used f…7.8
• CVE-2023-7102Use of a Third Party library produced a vulnerability in Bar…9.8
• CVE-2023-7103Authentication Bypass by Primary Weakness vulnerability in Z…9.8
• CVE-2023-7105A vulnerability was found in code-projects E-Commerce Websit…9.8
• CVE-2023-7106A vulnerability was found in code-projects E-Commerce Websit…8.8
• CVE-2023-7107A vulnerability was found in code-projects E-Commerce Websit…9.8
• CVE-2023-7108A vulnerability classified as problematic has been found in …6.1
• CVE-2023-7109A vulnerability classified as critical was found in code-pro…9.8
• CVE-2023-7110A vulnerability, which was classified as critical, has been …9.8