Bug 833451 (CVE-2021-45346)

Summary:	dev-db/sqlite: record leakage
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	minor	CC:	base-system, jsmolic
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/guyinatuxedo/sqlite3_record_leaking
Whiteboard:	B4 [upstream]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2022-02-16 03:23:24 UTC

CVE-2021-45346:

A Memory Leak vulnerabilty exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicous user obtain sensitive information..

Not clear if this is actually reported upstream.