Security Advisory

CVE-2021-3119

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-03-25 22:40:30
Last updated 2024-08-03 16:45:51
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipher_export in crypto.c and sqlite3StrICmp in sqlite3.c. This may allow an attacker to perform a remote denial of service attack. For example, an SQL injection can be used to execute the crafted SQL command sequence, which causes a segmentation fault.