SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sqlite | Nov 8, 2019 | May 30, 2019 |
| Centos_linux | — | Upgrade sqliteUpgrade sqlite-debugsourceUpgrade sqlite-libsUpgrade sqlite-develUpgrade sqlite-tcl-debuginfoUpgrade lemonUpgrade sqlite-debuginfoUpgrade sqlite-libs-debuginfoUpgrade sqlite-analyzer-debuginfoUpgrade lemon-debuginfoUpgrade sqlite-doc | Apr 29, 2020 | May 30, 2019 |
| Debian | — | Upgrade sqlite3Upgrade db5.3 | Jul 30, 2024 | May 30, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 3, 2025 |
| Freebsd | — | Upgrade mysql80-serverUpgrade mysql56-serverUpgrade percona57-serverUpgrade mysql57-serverUpgrade percona55-serverUpgrade percona56-server | Jan 16, 2020 | Jan 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sqlite-develUpgrade sqlite | Dec 4, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sqliteUpgrade sqlite-devel | Sep 25, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sqliteUpgrade sqlite-devel | Sep 24, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sqlite-docUpgrade sqlite-libsUpgrade sqliteUpgrade sqlite-devel | Aug 28, 2019 | May 30, 2019 |
| Oracle_linux | — | Upgrade lemonUpgrade sqlite-libsUpgrade sqlite-develUpgrade sqlite-docUpgrade sqlite | Oct 5, 2022 | Mar 20, 2019 |
| Redhat_linux | — | Upgrade sqlite-libsUpgrade lemon-debuginfoUpgrade sqlite-develUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-docUpgrade lemonUpgrade sqlite-tcl-debuginfoUpgrade sqlite-debugsourceUpgrade sqlite-libs-debuginfoUpgrade sqliteUpgrade sqlite-debuginfoNo solution exists | Apr 29, 2020 | May 30, 2019 |
| Suse | — | Upgrade libsqlite3-0-32bitUpgrade sqlite3Upgrade sqlite3-develUpgrade libsqlite3-0 | Jun 15, 2019 | May 30, 2019 |
| Ubuntu | — | Upgrade libdb5.3Upgrade libsqlite3-0 (Ubuntu Pro)Upgrade libsqlite3-0Upgrade libdb5.3-sql-devUpgrade libdb5.3-sql-dev (Ubuntu Pro)Upgrade db5.3-utilUpgrade db5.3-sql-utilUpgrade libdb5.3-sqlUpgrade db5.3-util (Ubuntu Pro)Upgrade db5.3-sql-util (Ubuntu Pro)Upgrade libdb5.3-sql (Ubuntu Pro)Upgrade sqlite3 (Ubuntu Pro)Upgrade libdb5.3 (Ubuntu Pro)Upgrade sqlite3 | Jun 5, 2019 | May 30, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub