Description

An issue was found in fts5UnicodeTokenize() in ext/fts5/fts5_tokenize.c in Sqlite. A unicode61 tokenizer configured to treat unicode "control-characters" (class Cc), was treating embedded nul characters as tokens. The issue was fixed in sqlite-3.34.0 and later.

Remediation

References

CVE-2021-20223

Related Vulnerabilities

WordPress Plugin Welcart e-Commerce Information Disclosure (2.2.7)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16222)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29046)

Oracle Application Server CVE-2008-1812 Vulnerability (CVE-2008-1812)

Apache Traffic Server CVE-2014-3525 Vulnerability (CVE-2014-3525)

Severity

Critical

Classification

CVE-2021-20223 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities