CVE-2021-3119

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-3119
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3119.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-3119
Published
2021-03-25T23:15:13Z
Modified
2026-07-09T00:14:06Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipher_export in crypto.c and sqlite3StrICmp in sqlite3.c. This may allow an attacker to perform a remote denial of service attack. For example, an SQL injection can be used to execute the crafted SQL command sequence, which causes a segmentation fault.

References

Affected packages

Git / github.com/sqlcipher/sqlcipher

Affected ranges

Type
GIT
Repo
https://github.com/sqlcipher/sqlcipher
Events
Introduced
5e991ea68690b8842c47d27bfc7b31e5641b11c4
Fixed
0663d8500204e14bd2bb0ca25162d91e4555528d
Fixed
cb71f53e8cea4802509f182fa5bead0ac6ab0e7f
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:zetetic:sqlcipher:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.0"
        },
        {
            "fixed": "4.4.3"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v4.*
v4.0.0
v4.0.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3119.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "122904592483707979833599660455540341101",
            "length": 3304
        },
        "id": "CVE-2021-3119-231b5478",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/sqlcipher/sqlcipher/commit/cb71f53e8cea4802509f182fa5bead0ac6ab0e7f",
        "target": {
            "file": "src/crypto.c",
            "function": "sqlcipher_exportFunc"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "92679572688087267758292628190862583692",
                "325443549466430923752903565462461062814",
                "165346396258830426250077782483233570048",
                "276657461895462835585498397849336397285",
                "42902802685709965109510808350114232897",
                "90727149990111638663453938265938693969",
                "97578682456010119313916029732905392810"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2021-3119-8e498fa8",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/sqlcipher/sqlcipher/commit/cb71f53e8cea4802509f182fa5bead0ac6ab0e7f",
        "target": {
            "file": "src/crypto.c"
        }
    }
]
vanir_signatures_modified 
"2026-07-09T00:14:06Z"