The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sqlite | Aug 30, 2017 | Apr 24, 2015 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Mar 24, 2017 | Apr 24, 2015 |
| Apple Osx Sqlite | — | Upgrade macOS to the latest version | Apr 5, 2017 | Apr 24, 2015 |
| Centos_linux | — | Upgrade sqliteUpgrade sqlite-develUpgrade lemonUpgrade sqlite-tclUpgrade sqlite-doc | Dec 1, 2016 | Apr 24, 2015 |
| Debian | — | Upgrade sqlite3 | Jul 30, 2024 | Apr 24, 2015 |
| Freebsd | — | Upgrade sqlite3 | Dec 10, 2025 | Apr 18, 2015 |
| Gentoo Linux | — | Upgrade dev-db/sqlite. | Oct 30, 2017 | Apr 24, 2015 |
| Oracle Solaris | — | Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2015 |
| Oracle_linux | — | Upgrade sqlite-docUpgrade sqlite-tclUpgrade lemonUpgrade sqlite-develUpgrade sqlite | Oct 16, 2024 | Apr 24, 2015 |
| Php | — | Upgrade to PHP version 5.6.10Upgrade to PHP version 5.4.42Upgrade to PHP version 5.5.26 | Sep 15, 2022 | Apr 24, 2015 |
| Suse | — | Upgrade php7-pgsqlUpgrade php7-fastcgiUpgrade php7-odbcUpgrade php7-wddxUpgrade php7-enchantUpgrade php7-sqliteUpgrade php7-ftpUpgrade php7-snmpUpgrade php7-sysvsemUpgrade php7-fpmUpgrade php7-mbstringUpgrade php7-zlibUpgrade php7-soapUpgrade php7-bcmathUpgrade sqlite3Upgrade php7-xmlwriterUpgrade php7-pharUpgrade php7-develUpgrade apache2-mod_php7Upgrade php7-pdoUpgrade php7-curlUpgrade php7-exifUpgrade php7-gettextUpgrade php7-tokenizerUpgrade php7-intlUpgrade php7-iconvUpgrade php7-sysvmsgUpgrade php7-ctypeUpgrade php7-embedUpgrade php7-socketsUpgrade php7-posixUpgrade sqlite3-docUpgrade php7-pear-archive_tarUpgrade php7-xslUpgrade php7-opensslUpgrade php7-zipUpgrade php7-pearUpgrade php7-domUpgrade php7-calendarUpgrade php7-opcacheUpgrade php7-pspellUpgrade php7-gmpUpgrade php7-gdUpgrade libsqlite3-0Upgrade php7-sodiumUpgrade php7-pcntlUpgrade php7-shmopUpgrade php7Upgrade php7-tidyUpgrade php7-readlineUpgrade php7-sysvshmUpgrade php7-xmlrpcUpgrade php7-imapUpgrade php7-mcryptUpgrade libsqlite3-0-32bitUpgrade php7-dbaUpgrade php7-bz2Upgrade php7-fileinfoUpgrade sqlite3-develUpgrade php7-jsonUpgrade php7-xmlreaderUpgrade php7-ldapUpgrade php72-develUpgrade php7-mysql | Dec 22, 2016 | Apr 24, 2015 |
| Ubuntu | — | Upgrade libsqlite3-0 | Nov 8, 2024 | Apr 24, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub