The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sqlite | Aug 30, 2017 | Apr 24, 2015 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Mar 24, 2017 | Apr 24, 2015 |
| Apple Osx Sqlite | — | Upgrade macOS to the latest version | Apr 5, 2017 | Apr 24, 2015 |
| Centos_linux | — | Upgrade sqlite-docUpgrade sqlite-tclUpgrade lemonUpgrade sqlite-develUpgrade sqlite | Dec 1, 2016 | Apr 24, 2015 |
| Debian | — | Upgrade sqlite3 | Jul 30, 2024 | Apr 24, 2015 |
| Freebsd | — | Upgrade sqlite3 | Dec 10, 2025 | Apr 18, 2015 |
| Gentoo Linux | — | Upgrade dev-db/sqlite. | Oct 30, 2017 | Apr 24, 2015 |
| Oracle Solaris | — | Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2015 |
| Oracle_linux | — | Upgrade sqliteUpgrade sqlite-tclUpgrade sqlite-docUpgrade lemonUpgrade sqlite-devel | Oct 16, 2024 | Apr 24, 2015 |
| Php | — | Upgrade to PHP version 5.6.10Upgrade to PHP version 5.4.42Upgrade to PHP version 5.5.26 | Sep 15, 2022 | Apr 24, 2015 |
| Suse | — | Upgrade php7-calendarUpgrade php7-pearUpgrade php7-xmlrpcUpgrade php7-fastcgiUpgrade php7-fileinfoUpgrade php7-intlUpgrade php7-exifUpgrade php7-xmlreaderUpgrade php7-embedUpgrade php7-zipUpgrade php7-pcntlUpgrade php7-iconvUpgrade php7-enchantUpgrade php7-opcacheUpgrade php7-pspellUpgrade php72-develUpgrade php7-ctypeUpgrade php7Upgrade php7-socketsUpgrade php7-imapUpgrade php7-domUpgrade php7-pdoUpgrade php7-gmpUpgrade php7-sodiumUpgrade php7-curlUpgrade php7-posixUpgrade libsqlite3-0-32bitUpgrade php7-gdUpgrade php7-tidyUpgrade php7-xslUpgrade sqlite3Upgrade php7-xmlwriterUpgrade php7-snmpUpgrade php7-jsonUpgrade php7-mysqlUpgrade php7-tokenizerUpgrade apache2-mod_php7Upgrade sqlite3-docUpgrade php7-pharUpgrade php7-opensslUpgrade php7-develUpgrade php7-fpmUpgrade php7-odbcUpgrade php7-bcmathUpgrade php7-sysvsemUpgrade php7-bz2Upgrade php7-mcryptUpgrade libsqlite3-0Upgrade php7-ftpUpgrade php7-pgsqlUpgrade php7-pear-archive_tarUpgrade php7-dbaUpgrade php7-gettextUpgrade php7-shmopUpgrade sqlite3-develUpgrade php7-mbstringUpgrade php7-sqliteUpgrade php7-sysvshmUpgrade php7-readlineUpgrade php7-sysvmsgUpgrade php7-ldapUpgrade php7-wddxUpgrade php7-soapUpgrade php7-zlib | Dec 22, 2016 | Apr 24, 2015 |
| Ubuntu | — | Upgrade libsqlite3-0 | Nov 8, 2024 | Apr 24, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub