The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sqlite | Aug 30, 2017 | Apr 24, 2015 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Mar 24, 2017 | Apr 24, 2015 |
| Apple Osx Sqlite | — | Upgrade macOS to the latest version | Apr 5, 2017 | Apr 24, 2015 |
| Centos_linux | — | Upgrade sqliteUpgrade sqlite-docUpgrade sqlite-tclUpgrade sqlite-develUpgrade lemon | Dec 1, 2016 | Apr 24, 2015 |
| Debian | — | Upgrade sqlite3 | Jul 30, 2024 | Apr 24, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 10, 2015 |
| Freebsd | — | Upgrade sqlite3 | Dec 10, 2025 | Apr 18, 2015 |
| Gentoo Linux | — | Upgrade dev-db/sqlite. | Oct 30, 2017 | Apr 24, 2015 |
| Oracle Solaris | — | Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2015 |
| Oracle_linux | — | Upgrade sqlite-tclUpgrade sqlite-docUpgrade lemonUpgrade sqlite-develUpgrade sqlite | Oct 16, 2024 | Apr 24, 2015 |
| Php | — | Upgrade to PHP version 5.5.26Upgrade to PHP version 5.4.42Upgrade to PHP version 5.6.10 | Sep 15, 2022 | Apr 24, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 31, 2015 |
| Suse | — | Upgrade php72-develUpgrade php7-domUpgrade php7-exifUpgrade php7-pdoUpgrade php7-sqliteUpgrade php7-zipUpgrade php7-bcmathUpgrade php7-tidyUpgrade php7-opcacheUpgrade php7-embedUpgrade php7-mysqlUpgrade php7-ftpUpgrade php7-soapUpgrade php7-tokenizerUpgrade php7-pearUpgrade php7-snmpUpgrade php7-enchantUpgrade php7-pspellUpgrade php7-iconvUpgrade php7-gettextUpgrade php7-wddxUpgrade php7-posixUpgrade php7-xmlwriterUpgrade php7-intlUpgrade php7-pharUpgrade php7-pgsqlUpgrade php7-curlUpgrade php7-socketsUpgrade php7-sysvsemUpgrade php7-gdUpgrade php7Upgrade php7-odbcUpgrade php7-imapUpgrade php7-xmlrpcUpgrade php7-fileinfoUpgrade php7-sysvmsgUpgrade php7-sysvshmUpgrade php7-pear-archive_tarUpgrade php7-xslUpgrade php7-fastcgiUpgrade php7-dbaUpgrade php7-fpmUpgrade php7-mcryptUpgrade php7-xmlreaderUpgrade apache2-mod_php7Upgrade php7-develUpgrade php7-zlibUpgrade php7-sodiumUpgrade php7-bz2Upgrade php7-pcntlUpgrade php7-mbstringUpgrade php7-gmpUpgrade php7-readlineUpgrade php7-jsonUpgrade php7-shmopUpgrade php7-ctypeUpgrade php7-calendarUpgrade php7-opensslUpgrade php7-ldap | Dec 22, 2016 | Apr 24, 2015 |
| Ubuntu | — | Upgrade libsqlite3-0 | Nov 8, 2024 | Apr 24, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub