In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade lemonUpgrade sqlite-libsUpgrade sqlite-develUpgrade sqliteUpgrade sqlite-doc | May 4, 2022 | Jun 27, 2020 |
| Alpine Linux | — | Upgrade sqlite | Oct 1, 2024 | Jun 27, 2020 |
| Apple Osx Sqlite | — | Upgrade macOS to the latest versionApply Apple macOS Security Update 2021-001 Catalina | Nov 13, 2020 | Nov 12, 2020 |
| Centos_linux | — | Upgrade sqlite-debugsourceUpgrade sqlite-debuginfoUpgrade sqlite-libs-debuginfoUpgrade sqliteUpgrade sqlite-libsUpgrade sqlite-analyzer-debuginfoUpgrade lemon-debuginfoUpgrade sqlite-tcl-debuginfoUpgrade sqlite-docUpgrade sqlite-develUpgrade lemon | Jun 1, 2021 | Jun 27, 2020 |
| Debian | — | Upgrade sqlite3 | Jul 30, 2024 | Jun 27, 2020 |
| Gentoo Linux | — | Upgrade dev-db/sqlite. | Jul 28, 2020 | Jun 27, 2020 |
| Google Chrome | — | — | Sep 9, 2022 | Jun 27, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sqlite-libsUpgrade sqliteUpgrade sqlite-docUpgrade sqlite-devel | Jul 31, 2020 | Jun 27, 2020 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 3.32.3 | Feb 12, 2021 | Jun 27, 2020 |
| Oracle Solaris | — | Upgrade database/sqlite-3 to version 3.32.3-11.4.27.0.1.82.0 on Solaris 11.4Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.32.3-11.4.27.0.1.82.0 on Solaris 11.4Upgrade database/sqlite-3/documentation to version 3.32.3-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jun 27, 2020 |
| Oracle_linux | — | Upgrade sqliteUpgrade lemonUpgrade sqlite-libsUpgrade sqlite-docUpgrade sqlite-devel | May 26, 2021 | Jun 15, 2020 |
| Redhat_linux | — | Upgrade sqliteUpgrade sqlite-tcl-debuginfoUpgrade sqlite-debugsourceUpgrade lemonUpgrade sqlite-libsUpgrade sqlite-develUpgrade sqlite-debuginfoUpgrade sqlite-docUpgrade sqlite-libs-debuginfoUpgrade sqlite-analyzer-debuginfoUpgrade lemon-debuginfo | May 21, 2021 | Jun 27, 2020 |
| Rocky_linux | — | Upgrade sqlite-debugsourceUpgrade sqlite-debuginfoUpgrade sqlite-libs-debuginfoUpgrade sqlite-develUpgrade sqlite-libsUpgrade lemonUpgrade lemon-debuginfoUpgrade sqlite | Mar 12, 2024 | Jun 27, 2020 |
| Suse | — | Upgrade libsqlite3-0-32bitUpgrade sqlite3Upgrade libsqlite3-0Upgrade sqlite3-docUpgrade sqlite3-devel | Jul 15, 2021 | Jun 27, 2020 |
| Ubuntu | — | Upgrade sqlite3Upgrade libsqlite3-0 | Aug 5, 2020 | Jun 27, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub