sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sqlite | Dec 27, 2019 | Nov 25, 2019 |
| Debian | — | Upgrade sqlite3 | Jul 30, 2024 | Nov 25, 2019 |
| Oracle Solaris | — | Upgrade database/sqlite-3 to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade database/sqlite-3/documentation to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Nov 25, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 25, 2019 |
| Suse | — | Upgrade sqlite3Upgrade libsqlite3-0-32bitUpgrade libsqlite3-0Upgrade sqlite3-docUpgrade sqlite3-devel | Jul 16, 2021 | Nov 25, 2019 |
| Ubuntu | — | Upgrade sqlite3Upgrade libsqlite3-0 | Dec 3, 2019 | Nov 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub