CVE-2022-35737 PoC — SQLite 输入验证错误漏洞

Source

https://github.com/rvermeulen/codeql-cve-2022-35737

Associated Vulnerability

Title:SQLite 输入验证错误漏洞 (CVE-2022-35737)
Description:SQLite是一款轻型的数据库，是遵守ACID的关系型数据库管理系统。 SQLite 3.39.2之前版本存在安全漏洞，该漏洞源于辅助C语言的API

Description

A CodeQL query to find CVE 2022-35737

File Snapshot


 [4.0K]  /data/pocs/18b3641ddc7127ca4d7bed1f355473153b824567
├── [  28]  codeql-workspace.yml
├── [4.0K]  cve-2022-35737-queries
│   ├── [ 123]  codeql-pack.lock.yml
│   ├── [1.3K]  IncorrectBuffer.ql
│   └── [ 105]  qlpack.yml
├── [4.0K]  cve-2022-35737-tests
│   ├── [ 123]  codeql-pack.lock.yml
│   ├── [4.0K]  IncorrectBuffer
│   │   ├── [ 189]  IncorrectBuffer.expected
│   │   ├── [  18]  IncorrectBuffer.qlref
│   │   └── [ 426]  test.c
│   └── [ 123]  qlpack.yml
├── [1.0K]  LICENSE
└── [ 34M]  sqlite-CVE-2022-35737.zip

3 directories, 11 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!