ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade sqliteUpgrade sqlite-libsUpgrade lemonUpgrade sqlite-libs-debuginfoUpgrade lemon-debuginfoUpgrade sqlite-debugsourceUpgrade sqlite-tcl-debuginfoUpgrade sqlite-debuginfoUpgrade sqlite-develUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-doc | Apr 29, 2020 | Jan 3, 2020 |
| Debian | — | Upgrade sqlite3 | Jul 30, 2024 | Jan 3, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sqlite-docUpgrade sqliteUpgrade sqlite-libsUpgrade sqlite-devel | Feb 26, 2020 | Jan 3, 2020 |
| Oracle Solaris | — | Upgrade database/sqlite-3 to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade database/sqlite-3/documentation to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 3, 2020 |
| Oracle_linux | — | Upgrade sqliteUpgrade sqlite-develUpgrade lemonUpgrade sqlite-libsUpgrade sqlite-doc | Oct 5, 2022 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade sqlite-docUpgrade lemon-debuginfoUpgrade sqlite-libs-debuginfoUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-debugsourceUpgrade sqliteUpgrade lemonUpgrade sqlite-tcl-debuginfoUpgrade sqlite-develUpgrade sqlite-debuginfoUpgrade sqlite-libs | Apr 29, 2020 | Jan 3, 2020 |
| Suse | — | Upgrade sqlite3Upgrade sqlite3-develUpgrade libsqlite3-0Upgrade sqlite3-docUpgrade libsqlite3-0-32bit | Jul 15, 2021 | Jan 3, 2020 |
| Ubuntu | — | Upgrade sqlite3Upgrade libsqlite3-0 | Mar 11, 2020 | Jan 3, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub