CVE-2023-7104

sqlite-doc: SQLite is a C library that implements an SQL database engine

CVE-2023-7104 is fixed in 47 products on 1 platform, first by lemon 3.22.0-1ubuntu0.7+esm1, released December 28, 2023. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.3
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0146
73rd percentile

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Security Fix(es): * sqlite: heap-buffer-overflow at sessionfuzz (CVE-2023-7104) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
lemon · RHEL 8 0:3.26.0-19.el8_9 RHSA-2024:0253 Jan 15, 2024
lemon · Ubuntu 18.04.6 LTS (bionic) 3.22.0-1ubuntu0.7+esm1 lemon 3.22.0-1ubuntu0.7+esm1 Dec 28, 2023
lemon · Ubuntu 20.04 LTS (focal) 3.31.1-4ubuntu0.6 lemon 3.31.1-4ubuntu0.6 Dec 28, 2023
lemon · Ubuntu 22.04.1 LTS (jammy) 3.37.2-2ubuntu0.3 lemon 3.37.2-2ubuntu0.3 Dec 28, 2023
lemon · almalinux 8 3.26.0-19.el8_9 ALSA-2024:0253 Jan 15, 2024
lemon · amzn 2023 3.40.0-1.amzn2023.0.4 ALAS2023-2024-490 Jan 19, 2024
lemon · ol 8 0:3.26.0-19.0.1.el8_9 ELSA-2024-0253 Jan 16, 2024
lemon-debuginfo · amzn 2023 3.40.0-1.amzn2023.0.4 ALAS2023-2024-490 Jan 19, 2024
libsqlite3-0 · Ubuntu 18.04.6 LTS (bionic) 3.22.0-1ubuntu0.7+esm1 libsqlite3-0 3.22.0-1ubuntu0.7+esm1 Dec 28, 2023
libsqlite3-0 · Ubuntu 20.04 LTS (focal) 3.31.1-4ubuntu0.6 libsqlite3-0 3.31.1-4ubuntu0.6 Dec 28, 2023
libsqlite3-0 · Ubuntu 22.04.1 LTS (jammy) 3.37.2-2ubuntu0.3 libsqlite3-0 3.37.2-2ubuntu0.3 Dec 28, 2023
libsqlite3-tcl · Ubuntu 18.04.6 LTS (bionic) 3.22.0-1ubuntu0.7+esm1 libsqlite3-tcl 3.22.0-1ubuntu0.7+esm1 Dec 28, 2023
libsqlite3-tcl · Ubuntu 20.04 LTS (focal) 3.31.1-4ubuntu0.6 libsqlite3-tcl 3.31.1-4ubuntu0.6 Dec 28, 2023
libsqlite3-tcl · Ubuntu 22.04.1 LTS (jammy) 3.37.2-2ubuntu0.3 libsqlite3-tcl 3.37.2-2ubuntu0.3 Dec 28, 2023
nspr · amzn 2023 4.35.0-5.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nspr-debuginfo · amzn 2023 4.35.0-5.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nspr-devel · amzn 2023 4.35.0-5.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-debuginfo · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-debugsource · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-devel · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-pkcs11-devel · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-softokn · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-softokn-debuginfo · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-softokn-devel · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-softokn-freebl · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-softokn-freebl-debuginfo · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-softokn-freebl-devel · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-sysinit · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-sysinit-debuginfo · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-tools · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-tools-debuginfo · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-util · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-util-debuginfo · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
nss-util-devel · amzn 2023 3.90.0-3.amzn2023.0.5 ALAS2023-2024-507 Feb 1, 2024
polkit · amzn 2023 0.117-11.amzn2023.0.1 ALAS2023-2024-508 Feb 1, 2024
polkit-debuginfo · amzn 2023 0.117-11.amzn2023.0.1 ALAS2023-2024-508 Feb 1, 2024
polkit-debugsource · amzn 2023 0.117-11.amzn2023.0.1 ALAS2023-2024-508 Feb 1, 2024
polkit-devel · amzn 2023 0.117-11.amzn2023.0.1 ALAS2023-2024-508 Feb 1, 2024
polkit-docs · amzn 2023 0.117-11.amzn2023.0.1 ALAS2023-2024-508 Feb 1, 2024
polkit-libs · amzn 2023 0.117-11.amzn2023.0.1 ALAS2023-2024-508 Feb 1, 2024
polkit-libs-debuginfo · amzn 2023 0.117-11.amzn2023.0.1 ALAS2023-2024-508 Feb 1, 2024
sqlite · RHEL 8 0:3.26.0-19.el8_9 RHSA-2024:0253 Jan 15, 2024
sqlite · RHEL 9 0:3.34.1-7.el9_3 RHSA-2024:0465 Jan 25, 2024
sqlite · almalinux 8 3.26.0-19.el8_9 ALSA-2024:0253 Jan 15, 2024
sqlite · almalinux 9 3.34.1-7.el9_3 ALSA-2024:0465 Jan 25, 2024
sqlite · amzn 2023 3.40.0-1.amzn2023.0.4 ALAS2023-2024-490 Jan 19, 2024
sqlite · ol 8 0:3.26.0-19.0.1.el8_9 ELSA-2024-0253 Jan 16, 2024
sqlite · ol 9 0:3.34.1-7.el9_3 ELSA-2024-0465 Jan 25, 2024
sqlite · rocky 8 0:3.26.0-19.el8_9 RLSA-2024:0253 Jan 16, 2024
sqlite · rocky 9 0:3.34.1-7.el9_3 RLSA-2024:0465 May 7, 2025
sqlite-analyzer · amzn 2023 3.40.0-1.amzn2023.0.4 ALAS2023-2024-490 Jan 19, 2024
sqlite-analyzer-debuginfo · amzn 2023 3.40.0-1.amzn2023.0.4 ALAS2023-2024-490 Jan 19, 2024
sqlite-debuginfo · amzn 2023 3.40.0-1.amzn2023.0.4 ALAS2023-2024-490 Jan 19, 2024
sqlite-debugsource · amzn 2023 3.40.0-1.amzn2023.0.4 ALAS2023-2024-490 Jan 19, 2024
sqlite-devel · RHEL 8 0:3.26.0-19.el8_9 RHSA-2024:0253 Jan 15, 2024
sqlite-devel · RHEL 9 0:3.34.1-7.el9_3 RHSA-2024:0465 Jan 25, 2024
sqlite-devel · almalinux 8 3.26.0-19.el8_9 ALSA-2024:0253 Jan 15, 2024
sqlite-devel · almalinux 9 3.34.1-7.el9_3 ALSA-2024:0465 Jan 25, 2024
sqlite-devel · amzn 2023 3.40.0-1.amzn2023.0.4 ALAS2023-2024-490 Jan 19, 2024
sqlite-devel · ol 8 0:3.26.0-19.0.1.el8_9 ELSA-2024-0253 Jan 16, 2024
sqlite-devel · ol 9 0:3.34.1-7.el9_3 ELSA-2024-0465 Jan 25, 2024
sqlite-doc · RHEL 8 0:3.26.0-19.el8_9 RHSA-2024:0253 Jan 15, 2024
sqlite-doc · almalinux 8 3.26.0-19.el8_9 ALSA-2024:0253 Jan 15, 2024
sqlite-doc · amzn 2023 3.40.0-1.amzn2023.0.4 ALAS2023-2024-490 Jan 19, 2024
sqlite-doc · ol 8 0:3.26.0-19.0.1.el8_9 ELSA-2024-0253 Jan 16, 2024
sqlite-libs · RHEL 8 0:3.26.0-19.el8_9 RHSA-2024:0253 Jan 15, 2024
sqlite-libs · RHEL 9 0:3.34.1-7.el9_3 RHSA-2024:0465 Jan 25, 2024
sqlite-libs · almalinux 8 3.26.0-19.el8_9 ALSA-2024:0253 Jan 15, 2024
sqlite-libs · almalinux 9 3.34.1-7.el9_3 ALSA-2024:0465 Jan 25, 2024
sqlite-libs · amzn 2023 3.40.0-1.amzn2023.0.4 ALAS2023-2024-490 Jan 19, 2024
sqlite-libs · ol 8 0:3.26.0-19.0.1.el8_9 ELSA-2024-0253 Jan 16, 2024
sqlite-libs · ol 9 0:3.34.1-7.el9_3 ELSA-2024-0465 Jan 25, 2024
sqlite-libs-debuginfo · amzn 2023 3.40.0-1.amzn2023.0.4 ALAS2023-2024-490 Jan 19, 2024
sqlite-tcl · amzn 2023 3.40.0-1.amzn2023.0.4 ALAS2023-2024-490 Jan 19, 2024
sqlite-tcl-debuginfo · amzn 2023 3.40.0-1.amzn2023.0.4 ALAS2023-2024-490 Jan 19, 2024
sqlite-tools · amzn 2023 3.40.0-1.amzn2023.0.4 ALAS2023-2024-490 Jan 19, 2024
sqlite-tools-debuginfo · amzn 2023 3.40.0-1.amzn2023.0.4 ALAS2023-2024-490 Jan 19, 2024
sqlite3 · Debian 12.15 (bookworm) 3.40.1-2+deb12u1 DEBIAN-CVE-2023-7104 Dec 29, 2023
sqlite3 · Debian 13.5 (trixie) 3.43.1-1 DEBIAN-CVE-2023-7104 Dec 29, 2023
sqlite3 · Debian 14 3.43.1-1 DEBIAN-CVE-2023-7104 Dec 29, 2023
sqlite3 · Ubuntu 18.04.6 LTS (bionic) 3.22.0-1ubuntu0.7+esm1 sqlite3 3.22.0-1ubuntu0.7+esm1 Dec 28, 2023
sqlite3 · Ubuntu 20.04 LTS (focal) 3.31.1-4ubuntu0.6 sqlite3 3.31.1-4ubuntu0.6 Dec 28, 2023
sqlite3 · Ubuntu 22.04.1 LTS (jammy) 3.37.2-2ubuntu0.3 sqlite3 3.37.2-2ubuntu0.3 Dec 28, 2023
sqlite3-tools · Ubuntu 22.04.1 LTS (jammy) 3.37.2-2ubuntu0.3 sqlite3-tools 3.37.2-2ubuntu0.3 Dec 28, 2023

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.