![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2022-46908 |
Description: | SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE. |
Test IDs: | 1.3.6.1.4.1.25623.1.1.4.2023.1295.1 1.3.6.1.4.1.25623.1.1.2.2023.1578 1.3.6.1.4.1.25623.1.1.2.2023.1588 1.3.6.1.4.1.25623.1.1.4.2022.4603.1 1.3.6.1.4.1.25623.1.1.2.2023.2104 1.3.6.1.4.1.25623.1.0.126250 1.3.6.1.4.1.25623.1.1.10.2023.0094 1.3.6.1.4.1.25623.1.1.2.2023.2052 1.3.6.1.4.1.25623.1.1.4.2023.2668.1 1.3.6.1.4.1.25623.1.1.4.2022.4628.1 |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2022-46908 https://security.gentoo.org/glsa/202311-03 https://news.ycombinator.com/item?id=33948588 https://sqlite.org/forum/forumpost/07beac8056151b2f https://sqlite.org/src/info/cefc032473ac5ad2 |