# CVE-2023-7104: sqlite-doc: SQLite is a C library that implements an SQL database engine

CVE-2023-7104 is fixed in 47 products on 1 platform, first by lemon 3.22.0-1ubuntu0.7+esm1, released December 28, 2023. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2023-7104
- Priority: High
- CVSS: 7.3 (Moderate)
- EPSS: 0.0146
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Dec 28, 2023

## Description

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server.  Security Fix(es):  * sqlite: heap-buffer-overflow at sessionfuzz (CVE-2023-7104)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | lemon RHEL 8 | 0:3.26.0-19.el8_9 | [RHSA-2024:0253](https://patchblox.com/security/data/fix/linux/rhsa-2024-0253.md) | Jan 15, 2024 |
| Linux | lemon Ubuntu 18.04.6 LTS (bionic) | 3.22.0-1ubuntu0.7+esm1 | [lemon 3.22.0-1ubuntu0.7+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-lemon-3.22.0-1ubuntu0.7-esm1.md) | Dec 28, 2023 |
| Linux | lemon Ubuntu 20.04 LTS (focal) | 3.31.1-4ubuntu0.6 | [lemon 3.31.1-4ubuntu0.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-lemon-3.31.1-4ubuntu0.6.md) | Dec 28, 2023 |
| Linux | lemon Ubuntu 22.04.1 LTS (jammy) | 3.37.2-2ubuntu0.3 | [lemon 3.37.2-2ubuntu0.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-lemon-3.37.2-2ubuntu0.3.md) | Dec 28, 2023 |
| Linux | lemon almalinux 8 | 3.26.0-19.el8_9 | [ALSA-2024:0253](https://patchblox.com/security/data/fix/linux/alsa-2024-0253.md) | Jan 15, 2024 |
| Linux | lemon amzn 2023 | 3.40.0-1.amzn2023.0.4 | [ALAS2023-2024-490](https://patchblox.com/security/data/fix/linux/alas2023-2024-490.md) | Jan 19, 2024 |
| Linux | lemon ol 8 | 0:3.26.0-19.0.1.el8_9 | [ELSA-2024-0253](https://patchblox.com/security/data/fix/linux/elsa-2024-0253.md) | Jan 16, 2024 |
| Linux | lemon-debuginfo amzn 2023 | 3.40.0-1.amzn2023.0.4 | [ALAS2023-2024-490](https://patchblox.com/security/data/fix/linux/alas2023-2024-490.md) | Jan 19, 2024 |
| Linux | libsqlite3-0 Ubuntu 18.04.6 LTS (bionic) | 3.22.0-1ubuntu0.7+esm1 | [libsqlite3-0 3.22.0-1ubuntu0.7+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libsqlite3-0-3.22.0-1ubuntu0.7-esm1.md) | Dec 28, 2023 |
| Linux | libsqlite3-0 Ubuntu 20.04 LTS (focal) | 3.31.1-4ubuntu0.6 | [libsqlite3-0 3.31.1-4ubuntu0.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libsqlite3-0-3.31.1-4ubuntu0.6.md) | Dec 28, 2023 |
| Linux | libsqlite3-0 Ubuntu 22.04.1 LTS (jammy) | 3.37.2-2ubuntu0.3 | [libsqlite3-0 3.37.2-2ubuntu0.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libsqlite3-0-3.37.2-2ubuntu0.3.md) | Dec 28, 2023 |
| Linux | libsqlite3-tcl Ubuntu 18.04.6 LTS (bionic) | 3.22.0-1ubuntu0.7+esm1 | [libsqlite3-tcl 3.22.0-1ubuntu0.7+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libsqlite3-tcl-3.22.0-1ubuntu0.7-esm1.md) | Dec 28, 2023 |
| Linux | libsqlite3-tcl Ubuntu 20.04 LTS (focal) | 3.31.1-4ubuntu0.6 | [libsqlite3-tcl 3.31.1-4ubuntu0.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libsqlite3-tcl-3.31.1-4ubuntu0.6.md) | Dec 28, 2023 |
| Linux | libsqlite3-tcl Ubuntu 22.04.1 LTS (jammy) | 3.37.2-2ubuntu0.3 | [libsqlite3-tcl 3.37.2-2ubuntu0.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libsqlite3-tcl-3.37.2-2ubuntu0.3.md) | Dec 28, 2023 |
| Linux | nspr amzn 2023 | 4.35.0-5.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nspr-debuginfo amzn 2023 | 4.35.0-5.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nspr-devel amzn 2023 | 4.35.0-5.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-debuginfo amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-debugsource amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-devel amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-pkcs11-devel amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-softokn amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-softokn-debuginfo amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-softokn-devel amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-softokn-freebl amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-softokn-freebl-debuginfo amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-softokn-freebl-devel amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-sysinit amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-sysinit-debuginfo amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-tools amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-tools-debuginfo amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-util amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-util-debuginfo amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | nss-util-devel amzn 2023 | 3.90.0-3.amzn2023.0.5 | [ALAS2023-2024-507](https://patchblox.com/security/data/fix/linux/alas2023-2024-507.md) | Feb 1, 2024 |
| Linux | polkit amzn 2023 | 0.117-11.amzn2023.0.1 | [ALAS2023-2024-508](https://patchblox.com/security/data/fix/linux/alas2023-2024-508.md) | Feb 1, 2024 |
| Linux | polkit-debuginfo amzn 2023 | 0.117-11.amzn2023.0.1 | [ALAS2023-2024-508](https://patchblox.com/security/data/fix/linux/alas2023-2024-508.md) | Feb 1, 2024 |
| Linux | polkit-debugsource amzn 2023 | 0.117-11.amzn2023.0.1 | [ALAS2023-2024-508](https://patchblox.com/security/data/fix/linux/alas2023-2024-508.md) | Feb 1, 2024 |
| Linux | polkit-devel amzn 2023 | 0.117-11.amzn2023.0.1 | [ALAS2023-2024-508](https://patchblox.com/security/data/fix/linux/alas2023-2024-508.md) | Feb 1, 2024 |
| Linux | polkit-docs amzn 2023 | 0.117-11.amzn2023.0.1 | [ALAS2023-2024-508](https://patchblox.com/security/data/fix/linux/alas2023-2024-508.md) | Feb 1, 2024 |
| Linux | polkit-libs amzn 2023 | 0.117-11.amzn2023.0.1 | [ALAS2023-2024-508](https://patchblox.com/security/data/fix/linux/alas2023-2024-508.md) | Feb 1, 2024 |
| Linux | polkit-libs-debuginfo amzn 2023 | 0.117-11.amzn2023.0.1 | [ALAS2023-2024-508](https://patchblox.com/security/data/fix/linux/alas2023-2024-508.md) | Feb 1, 2024 |
| Linux | sqlite RHEL 8 | 0:3.26.0-19.el8_9 | [RHSA-2024:0253](https://patchblox.com/security/data/fix/linux/rhsa-2024-0253.md) | Jan 15, 2024 |
| Linux | sqlite RHEL 9 | 0:3.34.1-7.el9_3 | [RHSA-2024:0465](https://patchblox.com/security/data/fix/linux/rhsa-2024-0465.md) | Jan 25, 2024 |
| Linux | sqlite almalinux 8 | 3.26.0-19.el8_9 | [ALSA-2024:0253](https://patchblox.com/security/data/fix/linux/alsa-2024-0253.md) | Jan 15, 2024 |
| Linux | sqlite almalinux 9 | 3.34.1-7.el9_3 | [ALSA-2024:0465](https://patchblox.com/security/data/fix/linux/alsa-2024-0465.md) | Jan 25, 2024 |
| Linux | sqlite amzn 2023 | 3.40.0-1.amzn2023.0.4 | [ALAS2023-2024-490](https://patchblox.com/security/data/fix/linux/alas2023-2024-490.md) | Jan 19, 2024 |
| Linux | sqlite ol 8 | 0:3.26.0-19.0.1.el8_9 | [ELSA-2024-0253](https://patchblox.com/security/data/fix/linux/elsa-2024-0253.md) | Jan 16, 2024 |
| Linux | sqlite ol 9 | 0:3.34.1-7.el9_3 | [ELSA-2024-0465](https://patchblox.com/security/data/fix/linux/elsa-2024-0465.md) | Jan 25, 2024 |
| Linux | sqlite rocky 8 | 0:3.26.0-19.el8_9 | [RLSA-2024:0253](https://patchblox.com/security/data/fix/linux/rlsa-2024-0253.md) | Jan 16, 2024 |
| Linux | sqlite rocky 9 | 0:3.34.1-7.el9_3 | [RLSA-2024:0465](https://patchblox.com/security/data/fix/linux/rlsa-2024-0465.md) | May 7, 2025 |
| Linux | sqlite-analyzer amzn 2023 | 3.40.0-1.amzn2023.0.4 | [ALAS2023-2024-490](https://patchblox.com/security/data/fix/linux/alas2023-2024-490.md) | Jan 19, 2024 |
| Linux | sqlite-analyzer-debuginfo amzn 2023 | 3.40.0-1.amzn2023.0.4 | [ALAS2023-2024-490](https://patchblox.com/security/data/fix/linux/alas2023-2024-490.md) | Jan 19, 2024 |
| Linux | sqlite-debuginfo amzn 2023 | 3.40.0-1.amzn2023.0.4 | [ALAS2023-2024-490](https://patchblox.com/security/data/fix/linux/alas2023-2024-490.md) | Jan 19, 2024 |
| Linux | sqlite-debugsource amzn 2023 | 3.40.0-1.amzn2023.0.4 | [ALAS2023-2024-490](https://patchblox.com/security/data/fix/linux/alas2023-2024-490.md) | Jan 19, 2024 |
| Linux | sqlite-devel RHEL 8 | 0:3.26.0-19.el8_9 | [RHSA-2024:0253](https://patchblox.com/security/data/fix/linux/rhsa-2024-0253.md) | Jan 15, 2024 |
| Linux | sqlite-devel RHEL 9 | 0:3.34.1-7.el9_3 | [RHSA-2024:0465](https://patchblox.com/security/data/fix/linux/rhsa-2024-0465.md) | Jan 25, 2024 |
| Linux | sqlite-devel almalinux 8 | 3.26.0-19.el8_9 | [ALSA-2024:0253](https://patchblox.com/security/data/fix/linux/alsa-2024-0253.md) | Jan 15, 2024 |
| Linux | sqlite-devel almalinux 9 | 3.34.1-7.el9_3 | [ALSA-2024:0465](https://patchblox.com/security/data/fix/linux/alsa-2024-0465.md) | Jan 25, 2024 |
| Linux | sqlite-devel amzn 2023 | 3.40.0-1.amzn2023.0.4 | [ALAS2023-2024-490](https://patchblox.com/security/data/fix/linux/alas2023-2024-490.md) | Jan 19, 2024 |
| Linux | sqlite-devel ol 8 | 0:3.26.0-19.0.1.el8_9 | [ELSA-2024-0253](https://patchblox.com/security/data/fix/linux/elsa-2024-0253.md) | Jan 16, 2024 |
| Linux | sqlite-devel ol 9 | 0:3.34.1-7.el9_3 | [ELSA-2024-0465](https://patchblox.com/security/data/fix/linux/elsa-2024-0465.md) | Jan 25, 2024 |
| Linux | sqlite-doc RHEL 8 | 0:3.26.0-19.el8_9 | [RHSA-2024:0253](https://patchblox.com/security/data/fix/linux/rhsa-2024-0253.md) | Jan 15, 2024 |
| Linux | sqlite-doc almalinux 8 | 3.26.0-19.el8_9 | [ALSA-2024:0253](https://patchblox.com/security/data/fix/linux/alsa-2024-0253.md) | Jan 15, 2024 |
| Linux | sqlite-doc amzn 2023 | 3.40.0-1.amzn2023.0.4 | [ALAS2023-2024-490](https://patchblox.com/security/data/fix/linux/alas2023-2024-490.md) | Jan 19, 2024 |
| Linux | sqlite-doc ol 8 | 0:3.26.0-19.0.1.el8_9 | [ELSA-2024-0253](https://patchblox.com/security/data/fix/linux/elsa-2024-0253.md) | Jan 16, 2024 |
| Linux | sqlite-libs RHEL 8 | 0:3.26.0-19.el8_9 | [RHSA-2024:0253](https://patchblox.com/security/data/fix/linux/rhsa-2024-0253.md) | Jan 15, 2024 |
| Linux | sqlite-libs RHEL 9 | 0:3.34.1-7.el9_3 | [RHSA-2024:0465](https://patchblox.com/security/data/fix/linux/rhsa-2024-0465.md) | Jan 25, 2024 |
| Linux | sqlite-libs almalinux 8 | 3.26.0-19.el8_9 | [ALSA-2024:0253](https://patchblox.com/security/data/fix/linux/alsa-2024-0253.md) | Jan 15, 2024 |
| Linux | sqlite-libs almalinux 9 | 3.34.1-7.el9_3 | [ALSA-2024:0465](https://patchblox.com/security/data/fix/linux/alsa-2024-0465.md) | Jan 25, 2024 |
| Linux | sqlite-libs amzn 2023 | 3.40.0-1.amzn2023.0.4 | [ALAS2023-2024-490](https://patchblox.com/security/data/fix/linux/alas2023-2024-490.md) | Jan 19, 2024 |
| Linux | sqlite-libs ol 8 | 0:3.26.0-19.0.1.el8_9 | [ELSA-2024-0253](https://patchblox.com/security/data/fix/linux/elsa-2024-0253.md) | Jan 16, 2024 |
| Linux | sqlite-libs ol 9 | 0:3.34.1-7.el9_3 | [ELSA-2024-0465](https://patchblox.com/security/data/fix/linux/elsa-2024-0465.md) | Jan 25, 2024 |
| Linux | sqlite-libs-debuginfo amzn 2023 | 3.40.0-1.amzn2023.0.4 | [ALAS2023-2024-490](https://patchblox.com/security/data/fix/linux/alas2023-2024-490.md) | Jan 19, 2024 |
| Linux | sqlite-tcl amzn 2023 | 3.40.0-1.amzn2023.0.4 | [ALAS2023-2024-490](https://patchblox.com/security/data/fix/linux/alas2023-2024-490.md) | Jan 19, 2024 |
| Linux | sqlite-tcl-debuginfo amzn 2023 | 3.40.0-1.amzn2023.0.4 | [ALAS2023-2024-490](https://patchblox.com/security/data/fix/linux/alas2023-2024-490.md) | Jan 19, 2024 |
| Linux | sqlite-tools amzn 2023 | 3.40.0-1.amzn2023.0.4 | [ALAS2023-2024-490](https://patchblox.com/security/data/fix/linux/alas2023-2024-490.md) | Jan 19, 2024 |
| Linux | sqlite-tools-debuginfo amzn 2023 | 3.40.0-1.amzn2023.0.4 | [ALAS2023-2024-490](https://patchblox.com/security/data/fix/linux/alas2023-2024-490.md) | Jan 19, 2024 |
| Linux | sqlite3 Debian 12.15 (bookworm) | 3.40.1-2+deb12u1 | [DEBIAN-CVE-2023-7104](https://patchblox.com/security/data/fix/linux/debian-cve-2023-7104.md) | Dec 29, 2023 |
| Linux | sqlite3 Debian 13.5 (trixie) | 3.43.1-1 | [DEBIAN-CVE-2023-7104](https://patchblox.com/security/data/fix/linux/debian-cve-2023-7104.md) | Dec 29, 2023 |
| Linux | sqlite3 Debian 14 | 3.43.1-1 | [DEBIAN-CVE-2023-7104](https://patchblox.com/security/data/fix/linux/debian-cve-2023-7104.md) | Dec 29, 2023 |
| Linux | sqlite3 Ubuntu 18.04.6 LTS (bionic) | 3.22.0-1ubuntu0.7+esm1 | [sqlite3 3.22.0-1ubuntu0.7+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-sqlite3-3.22.0-1ubuntu0.7-esm1.md) | Dec 28, 2023 |
| Linux | sqlite3 Ubuntu 20.04 LTS (focal) | 3.31.1-4ubuntu0.6 | [sqlite3 3.31.1-4ubuntu0.6](https://patchblox.com/security/data/fix/linux/ubuntu-focal-sqlite3-3.31.1-4ubuntu0.6.md) | Dec 28, 2023 |
| Linux | sqlite3 Ubuntu 22.04.1 LTS (jammy) | 3.37.2-2ubuntu0.3 | [sqlite3 3.37.2-2ubuntu0.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-sqlite3-3.37.2-2ubuntu0.3.md) | Dec 28, 2023 |
| Linux | sqlite3-tools Ubuntu 22.04.1 LTS (jammy) | 3.37.2-2ubuntu0.3 | [sqlite3-tools 3.37.2-2ubuntu0.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-sqlite3-tools-3.37.2-2ubuntu0.3.md) | Dec 28, 2023 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.