SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sqlite | Aug 30, 2017 | Apr 24, 2015 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Mar 24, 2017 | Apr 24, 2015 |
| Apple Osx Sqlite | — | Upgrade macOS to the latest version | Apr 5, 2017 | Apr 24, 2015 |
| Centos_linux | — | Upgrade lemonUpgrade sqlite-tclUpgrade sqlite-docUpgrade sqlite-develUpgrade sqlite | Dec 1, 2016 | Apr 24, 2015 |
| Debian | — | Upgrade sqlite3 | Jul 30, 2024 | Apr 24, 2015 |
| Freebsd | — | Upgrade sqlite3 | Dec 10, 2025 | Apr 18, 2015 |
| Gentoo Linux | — | Upgrade dev-db/sqlite. | Oct 30, 2017 | Apr 24, 2015 |
| Oracle Solaris | — | Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2015 |
| Oracle_linux | — | Upgrade sqlite-develUpgrade sqlite-tclUpgrade lemonUpgrade sqlite-docUpgrade sqlite | Oct 16, 2024 | Apr 24, 2015 |
| Php | — | Upgrade to PHP version 5.6.10Upgrade to PHP version 5.4.42Upgrade to PHP version 5.5.26 | Sep 15, 2022 | Apr 24, 2015 |
| Suse | — | Upgrade php7-mcryptUpgrade php7-pharUpgrade php7-odbcUpgrade php7-ldapUpgrade php7-readlineUpgrade php7-gettextUpgrade php7-ftpUpgrade apache2-mod_php7Upgrade php7-pgsqlUpgrade php7-develUpgrade php7-dbaUpgrade php7-opensslUpgrade php7-jsonUpgrade php7-pear-archive_tarUpgrade php7-mysqlUpgrade php7-bcmathUpgrade php7-sysvshmUpgrade php7-mbstringUpgrade php7-wddxUpgrade php7-sysvsemUpgrade php7-bz2Upgrade php7-fpmUpgrade php7-sysvmsgUpgrade libsqlite3-0Upgrade sqlite3-docUpgrade php7-shmopUpgrade php7-sqliteUpgrade sqlite3-develUpgrade php7-tokenizerUpgrade php7-zlibUpgrade php7-soapUpgrade php7-pearUpgrade php7-socketsUpgrade php7-posixUpgrade php7-gmpUpgrade sqlite3Upgrade php7-imapUpgrade php7-sodiumUpgrade php7-pspellUpgrade php7Upgrade php7-ctypeUpgrade php72-develUpgrade php7-gdUpgrade libsqlite3-0-32bitUpgrade php7-embedUpgrade php7-fastcgiUpgrade php7-snmpUpgrade php7-pcntlUpgrade php7-zipUpgrade php7-curlUpgrade php7-calendarUpgrade php7-pdoUpgrade php7-intlUpgrade php7-iconvUpgrade php7-enchantUpgrade php7-opcacheUpgrade php7-xslUpgrade php7-domUpgrade php7-tidyUpgrade php7-xmlreaderUpgrade php7-exifUpgrade php7-xmlrpcUpgrade php7-fileinfoUpgrade php7-xmlwriter | Dec 22, 2016 | Apr 24, 2015 |
| Ubuntu | — | Upgrade libsqlite3-0 | Nov 8, 2024 | Apr 24, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub