The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sqlite | Aug 30, 2017 | Apr 24, 2015 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Mar 24, 2017 | Apr 24, 2015 |
| Apple Osx Sqlite | — | Upgrade macOS to the latest version | Apr 5, 2017 | Apr 24, 2015 |
| Centos_linux | — | Upgrade sqliteUpgrade sqlite-tclUpgrade sqlite-docUpgrade sqlite-develUpgrade lemon | Dec 1, 2016 | Apr 24, 2015 |
| Debian | — | Upgrade sqlite3 | Jul 30, 2024 | Apr 24, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 10, 2015 |
| Freebsd | — | Upgrade sqlite3 | Dec 10, 2025 | Apr 18, 2015 |
| Gentoo Linux | — | Upgrade dev-db/sqlite. | Oct 30, 2017 | Apr 24, 2015 |
| Oracle Solaris | — | Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2015 |
| Oracle_linux | — | Upgrade sqlite-develUpgrade sqliteUpgrade sqlite-docUpgrade lemonUpgrade sqlite-tcl | Oct 16, 2024 | Apr 24, 2015 |
| Php | — | Upgrade to PHP version 5.5.26Upgrade to PHP version 5.6.10Upgrade to PHP version 5.4.42 | Sep 15, 2022 | Apr 24, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 31, 2015 |
| Suse | — | Upgrade php7-jsonUpgrade php7-fileinfoUpgrade php7-pcntlUpgrade php7-gmpUpgrade php7-fpmUpgrade php7-mcryptUpgrade php7-sysvshmUpgrade apache2-mod_php7Upgrade php7-imapUpgrade php7-dbaUpgrade php7-xslUpgrade php7-pear-archive_tarUpgrade php7-xmlrpcUpgrade php7-ctypeUpgrade php7-fastcgiUpgrade php7-xmlreaderUpgrade php7-shmopUpgrade php7-mbstringUpgrade php7-zlibUpgrade php7-sodiumUpgrade php7-bz2Upgrade php7-calendarUpgrade php7-sysvmsgUpgrade php7-readlineUpgrade php7-develUpgrade php7-opensslUpgrade php7-ldapUpgrade php7-mysqlUpgrade php7-pspellUpgrade php7-tidyUpgrade php7-pgsqlUpgrade php7-snmpUpgrade php7-curlUpgrade php7-posixUpgrade php7-sysvsemUpgrade php7-ftpUpgrade php7-intlUpgrade php7-xmlwriterUpgrade php7-bcmathUpgrade php7-iconvUpgrade php7-gdUpgrade php7-socketsUpgrade php7-tokenizerUpgrade php7-exifUpgrade php7-embedUpgrade php7-sqliteUpgrade php7-enchantUpgrade php7-domUpgrade php7-pearUpgrade php72-develUpgrade php7-gettextUpgrade php7-odbcUpgrade php7-soapUpgrade php7Upgrade php7-wddxUpgrade php7-zipUpgrade php7-pdoUpgrade php7-pharUpgrade php7-opcache | Dec 22, 2016 | Apr 24, 2015 |
| Ubuntu | — | Upgrade libsqlite3-0 | Nov 8, 2024 | Apr 24, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub