CVE-2021-3119
High
Description
Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipher_export in crypto.c and sqlite3StrICmp in sqlite3.c. This may allow an attacker to perform a remote denial of service attack. For example, an SQL injection can be used to execute the crafted SQL command sequence, which causes a segmentation fault.
SeverityHigh
CVSS7.5
Exploit probability—
ProductZetetic Sqlcipher
PublishedMar 25, 2021
First seenMar 25, 2021
How to fix
Update
- zetetic sqlcipher4.4.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zetetic sqlcipher | 4.0 ≤ v < 4.4.3 | 4.4.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.