Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 8: MGASA-2023-0094 Moderate: sqlite3 Execution Risk

mageia
Calendar Grey March 18, 2023
Dist Mageia Esm H88
Recent enhancements to sqlite3 packages rectify a vulnerability in Mageia related to the running of untrusted scripts. Explore further for in-depth information.
SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allo...

Summary

SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE. (CVE-2022-46908)

References

- https://bugs.mageia.org/show_bug.cgi?id=31312

- https://lists.suse.com/pipermail/sle-security-updates/2022-December/013303.html

-

- https://www.cve.org/CVERecord?id=CVE-2022-46908

Topics%20covered

Topics Covered

security advisory execution risk sqlite Mageia UDF functions

Resolution

SRPMS

- 8/core/sqlite3-3.39.2-1.1.mga8

Publication date: 18 Mar 2023
URL: https://advisories.mageia.org/MGASA-2023-0094.html
Type: security
CVE: CVE-2022-46908

Topics%20covered

Topics Covered

security advisory execution risk sqlite Mageia UDF functions

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here