Filtered by vendor Zetetic Subscriptions
Filtered by product Sqlcipher Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-3119 1 Zetetic 1 Sqlcipher 2022-05-03 7.5 High
Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipher_export in crypto.c and sqlite3StrICmp in sqlite3.c. This may allow an attacker to perform a remote denial of service attack. For example, an SQL injection can be used to execute the crafted SQL command sequence, which causes a segmentation fault.
CVE-2020-27207 1 Zetetic 1 Sqlcipher 2020-12-03 7.5 High
Zetetic SQLCipher 4.x before 4.4.1 has a use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in sqlite3.c. A remote denial of service attack can be performed. For example, a SQL injection can be used to execute the crafted SQL command sequence. After that, some unexpected RAM data is read.