The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sqlite | Aug 30, 2017 | Apr 24, 2015 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Mar 24, 2017 | Apr 24, 2015 |
| Apple Osx Sqlite | — | Upgrade macOS to the latest version | Apr 5, 2017 | Apr 24, 2015 |
| Centos_linux | — | Upgrade sqliteUpgrade sqlite-develUpgrade sqlite-tclUpgrade lemonUpgrade sqlite-doc | Dec 1, 2016 | Apr 24, 2015 |
| Debian | — | Upgrade sqlite3 | Jul 30, 2024 | Apr 24, 2015 |
| Freebsd | — | Upgrade sqlite3 | Dec 10, 2025 | Apr 18, 2015 |
| Gentoo Linux | — | Upgrade dev-db/sqlite. | Oct 30, 2017 | Apr 24, 2015 |
| Oracle Solaris | — | Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2015 |
| Oracle_linux | — | Upgrade lemonUpgrade sqlite-docUpgrade sqliteUpgrade sqlite-tclUpgrade sqlite-devel | Oct 16, 2024 | Apr 24, 2015 |
| Php | — | Upgrade to PHP version 5.5.26Upgrade to PHP version 5.4.42Upgrade to PHP version 5.6.10 | Sep 15, 2022 | Apr 24, 2015 |
| Suse | — | Upgrade php7-xmlrpcUpgrade php7-domUpgrade php7-sodiumUpgrade php7-iconvUpgrade php7-fileinfoUpgrade php7Upgrade php72-develUpgrade php7-imapUpgrade php7-socketsUpgrade php7-curlUpgrade php7-opcacheUpgrade php7-ctypeUpgrade libsqlite3-0-32bitUpgrade php7-xmlwriterUpgrade php7-gdUpgrade php7-enchantUpgrade php7-xslUpgrade php7-calendarUpgrade php7-pearUpgrade php7-pdoUpgrade php7-fastcgiUpgrade php7-xmlreaderUpgrade sqlite3Upgrade php7-zipUpgrade php7-pcntlUpgrade php7-exifUpgrade php7-pspellUpgrade php7-embedUpgrade php7-snmpUpgrade php7-tidyUpgrade php7-intlUpgrade php7-gmpUpgrade php7-posixUpgrade php7-soapUpgrade php7-wddxUpgrade php7-readlineUpgrade sqlite3-develUpgrade php7-pgsqlUpgrade php7-sqliteUpgrade apache2-mod_php7Upgrade php7-odbcUpgrade php7-opensslUpgrade libsqlite3-0Upgrade php7-ldapUpgrade php7-zlibUpgrade php7-dbaUpgrade php7-tokenizerUpgrade php7-jsonUpgrade php7-ftpUpgrade php7-pear-archive_tarUpgrade sqlite3-docUpgrade php7-sysvmsgUpgrade php7-gettextUpgrade php7-bz2Upgrade php7-develUpgrade php7-sysvsemUpgrade php7-fpmUpgrade php7-bcmathUpgrade php7-pharUpgrade php7-mysqlUpgrade php7-mbstringUpgrade php7-mcryptUpgrade php7-shmopUpgrade php7-sysvshm | Dec 22, 2016 | Apr 24, 2015 |
| Ubuntu | — | Upgrade libsqlite3-0 | Nov 8, 2024 | Apr 24, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub