{"id":"CVE-2023-36191","aliases":["BELL-CVE-2023-36191","EUVD-2023-40168","GHSA-h9rq-cvxv-r43v","OESA-2023-1484","OESA-2023-1485","OESA-2023-1486","UBUNTU-CVE-2023-36191"],"status":"rejected","title":"sqlite3 v3.40.1 was discovered to contain a segmentation violation at /sqlite3_aflpp/shell.c.","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-06-23T01:01:54Z","modified":"2026-08-18T01:17:46Z","fixes":[{"ecosystem":"Alpaquita:23","package":"sqlite","fixed_in":["3.40.1-r2"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"sqlite","fixed_in":["3.40.1-r2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"sqlite","fixed_in":["3.37.2-6.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"sqlite","fixed_in":["3.37.2-6.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"sqlite","fixed_in":["3.37.2-6.oe2203sp2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:23","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.40.0-r0"},{"fixed":"3.40.1-r2"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.40.0-r0"},{"fixed":"3.40.1-r2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.37.2-6.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.37.2-6.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.37.2-6.oe2203sp2"}]}]}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36191","tags":["advisory"]},{"url":"https://www.sqlite.org/forum/forumpost/19f55ef73b"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KREKCQTJDVI2AEBG5ECZPSOQXIC2L5XL/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UBAHED5YFJPRGSEKNZIYHZBGSVHGEHOH/"},{"url":"https://github.com/advisories/GHSA-h9rq-cvxv-r43v"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-36191","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1484","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1485","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1486","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-36191","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-36191","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-36191","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.","status":"rejected","published":"2023-06-23T01:01:54.622Z","modified":"2025-02-13T15:46:47.56Z","updated_at":"2026-11-02T14:35:28.218693Z"}],"euvd":[{"id":"EUVD-2023-40168","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.","status":"published","published":"2023-06-23T01:01:54Z","modified":"2025-02-13T15:46:47Z","updated_at":"2026-11-03T00:03:55.006159Z"}],"ghsa":[{"id":"GHSA-h9rq-cvxv-r43v","title":"sqlite3 v3.40.1 was discovered to contain a segmentation violation at /sqlite3_aflpp/shell.c.","description":"sqlite3 v3.40.1 was discovered to contain a segmentation violation at /sqlite3_aflpp/shell.c.","status":"published","published":"2023-06-23T03:30:56Z","modified":"2023-11-11T05:05:20Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T14:54:59.032182Z"}],"nvd":[{"id":"CVE-2023-36191","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.","status":"rejected","published":"2023-06-23T02:15:09.597Z","modified":"2023-11-07T04:16:25.153Z","updated_at":"2026-11-02T14:08:12.414559Z"}],"osv":[{"id":"BELL-CVE-2023-36191","status":"published","published":"2023-06-23T02:15:00Z","modified":"2026-01-26T09:35:28.338213Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"OESA-2023-1484","title":"sqlite security update","description":"SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day.It also include lemon and sqlite3_analyzer and tcl tools.\r\n\r\nSecurity Fix(es):\r\n\r\nsqlite3 v3.40.1 was discovered to contain a segmentation violation at /sqlite3_aflpp/shell.c.(CVE-2023-36191)","status":"published","published":"2023-08-12T11:05:56Z","modified":"2026-08-18T01:17:46.485941779Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1485","title":"sqlite security update","description":"SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day.It also include lemon and sqlite3_analyzer and tcl tools.\r\n\r\nSecurity Fix(es):\r\n\r\nsqlite3 v3.40.1 was discovered to contain a segmentation violation at /sqlite3_aflpp/shell.c.(CVE-2023-36191)","status":"published","published":"2023-08-12T11:05:56Z","modified":"2026-08-18T01:17:46.756690241Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1486","title":"sqlite security update","description":"SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications that people use every day.It also include lemon and sqlite3_analyzer and tcl tools.\r\n\r\nSecurity Fix(es):\r\n\r\nsqlite3 v3.40.1 was discovered to contain a segmentation violation at /sqlite3_aflpp/shell.c.(CVE-2023-36191)","status":"published","published":"2023-08-12T11:05:56Z","modified":"2026-08-18T01:17:46.857551679Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"UBUNTU-CVE-2023-36191","description":"** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.","status":"withdrawn","published":"2023-06-23T02:15:00Z","modified":"2025-07-08T14:32:27.534925Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:21.882004Z"}]}}