Back to Database
Status published
High
CVE-2023-32697
Sqlite-jdbc vulnerable to remote code execution when JDBC url is attacker controlled
Vulnerability Description
SQLite JDBC is a library for accessing and creating SQLite database files in Java. Sqlite-jdbc addresses a remote code execution vulnerability via JDBC URL. This issue impacting versions 3.6.14.1 through 3.41.2.1 and has been fixed in version 3.41.2.2.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-32697
Credits & Attribution
No credits recorded in the NVD database.
References
More from xerial
View All →CVE-2023-43642
Missing upper bound check on chunk length in snappy-java
High
7.5
CVE-2023-34455
snappy-java's unchecked chunk length leads to DoS
High
7.5
CVE-2023-34454
snappy-java's Integer Overflow vulnerability in compress leads to DoS
Medium
5.9
CVE-2023-34453
snappy-java's Integer Overflow vulnerability in shuffle leads to DoS
Medium
5.9
Affected Vendor
xerial
View all reports →Affected Software
sqlite-jdbc
Vulnerable Versions:
>= 3.6.14.1, < 3.41.2.2
Timeline
Official Publish:
May 23rd, 2023
Last Modified:
March 5th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H