CVE-2021-45346: netapp ontap_select_deploy_administration_utility

Vulnerability summary

CVE-2021-45346 is a medium (CVSS 4.3) vulnerability in netapp ontap_select_deploy_administration_utility. EPSS estimates a 1.63% chance of exploitation in the next 30 days, higher than 75.8% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 14-02-2022
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain sensitive information. NOTE: The developer disputes this as a vulnerability stating that If you give SQLite a corrupted database file and submit a query against the database, it might read parts of the database that you did not intend or expect.

• CWE-401Missing Release of Memory after Effective LifetimeThe product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.