CVE-2021-3119
Published: 25 March 2021
Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipher_export in crypto.c and sqlite3StrICmp in sqlite3.c. This may allow an attacker to perform a remote denial of service attack. For example, an SQL injection can be used to execute the crafted SQL command sequence, which causes a segmentation fault.
Notes
Author | Note |
---|---|
sbeattie | introduced in 4.1.0 it seems |
Priority
Status
Package | Release | Status |
---|---|---|
sqlcipher Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(introduced in 4.1.0)
|
focal |
Not vulnerable
(introduced in 4.1.0)
|
|
groovy |
Not vulnerable
(introduced in 4.1.0)
|
|
trusty |
Does not exist
|
|
upstream |
Released
(4.4.3)
|
|
xenial |
Not vulnerable
(introduced in 4.1.0)
|
|
Patches: upstream: https://github.com/sqlcipher/sqlcipher/commit/cb71f53e8cea4802509f182fa5bead0ac6ab0e7f#diff-9305215a9a0ea69300281fc4af90bc7f3437e34a0e1745d030213152993ddae4 |
Severity score breakdown
Parameter | Value |
---|---|
Base score | 7.5 |
Attack vector | Network |
Attack complexity | Low |
Privileges required | None |
User interaction | None |
Scope | Unchanged |
Confidentiality | None |
Integrity impact | None |
Availability impact | High |
Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3119
- https://github.com/sqlcipher/sqlcipher/commit/cb71f53e8cea4802509f182fa5bead0ac6ab0e7f#diff-9305215a9a0ea69300281fc4af90bc7f3437e34a0e1745d030213152993ddae4
- https://www.telekom.com/resource/blob/621186/3fb50ca7a4a97728be18717ed7b0062c/dl-210308-critical-dos-vulnerability-in-sqlcipher-sql-command-processing-data.pdf
- NVD
- Launchpad
- Debian