CVE-2021-3119

Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipher_export in crypto.c and sqlite3StrICmp in sqlite3.c

published March 25, 2021

CVSS
—
EPSS
2%
Percentile
75.0
In the wild
Unconfirmed
What it is

Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipher_export in crypto.c and sqlite3StrICmp in sqlite3.c. This may allow an attacker to perform a remote denial of service attack. For example, an SQL injection can be used to execute the crafted SQL command sequence, which causes a segmentation fault.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01558 · 75.0th percentile
Published
2021-03-25T22:40Z
EPSS history
Timeline
  • 25 MAR 22:40Z
    Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipher_export in crypto.c and sqlite3StrICmp in sqlite3.c
    cvelistv5