ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade sqlite-develUpgrade sqlite-docUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-tcl-debuginfoUpgrade sqlite-debuginfoUpgrade sqliteUpgrade sqlite-libs-debuginfoUpgrade sqlite-debugsourceUpgrade lemon-debuginfoUpgrade lemonUpgrade sqlite-libs | Apr 29, 2020 | Jan 3, 2020 |
| Debian | — | Upgrade sqlite3 | Jul 30, 2024 | Jan 3, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sqlite-docUpgrade sqlite-develUpgrade sqlite-libsUpgrade sqlite | Feb 26, 2020 | Jan 3, 2020 |
| Oracle Solaris | — | Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade database/sqlite-3/documentation to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade database/sqlite-3 to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Jan 3, 2020 |
| Oracle_linux | — | Upgrade sqliteUpgrade sqlite-develUpgrade lemonUpgrade sqlite-docUpgrade sqlite-libs | Oct 5, 2022 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade sqlite-analyzer-debuginfoUpgrade sqlite-debugsourceUpgrade sqlite-docUpgrade lemonUpgrade sqliteUpgrade sqlite-tcl-debuginfoUpgrade sqlite-libs-debuginfoUpgrade lemon-debuginfoUpgrade sqlite-libsUpgrade sqlite-develUpgrade sqlite-debuginfo | Apr 29, 2020 | Jan 3, 2020 |
| Suse | — | Upgrade libsqlite3-0-32bitUpgrade sqlite3-develUpgrade sqlite3Upgrade libsqlite3-0Upgrade sqlite3-doc | Jul 15, 2021 | Jan 3, 2020 |
| Ubuntu | — | Upgrade sqlite3Upgrade libsqlite3-0 | Mar 11, 2020 | Jan 3, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 3, 2020 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub