The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sqlite | Aug 30, 2017 | Apr 24, 2015 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Mar 24, 2017 | Apr 24, 2015 |
| Apple Osx Sqlite | — | Upgrade macOS to the latest version | Apr 5, 2017 | Apr 24, 2015 |
| Centos_linux | — | Upgrade sqliteUpgrade sqlite-develUpgrade sqlite-docUpgrade sqlite-tclUpgrade lemon | Dec 1, 2016 | Apr 24, 2015 |
| Debian | — | Upgrade sqlite3 | Jul 30, 2024 | Apr 24, 2015 |
| Freebsd | — | Upgrade sqlite3 | Dec 10, 2025 | Apr 18, 2015 |
| Gentoo Linux | — | Upgrade dev-db/sqlite. | Oct 30, 2017 | Apr 24, 2015 |
| Oracle Solaris | — | Upgrade database/sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade database/sqlite-3/documentation to version 3.9.2-0.175.3.8.0.2.0 on Solaris 11.3Upgrade web/browser/firefox to version 38.4.0-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Apr 24, 2015 |
| Oracle_linux | — | Upgrade sqlite-develUpgrade lemonUpgrade sqliteUpgrade sqlite-docUpgrade sqlite-tcl | Oct 16, 2024 | Apr 24, 2015 |
| Php | — | Upgrade to PHP version 5.6.10Upgrade to PHP version 5.4.42Upgrade to PHP version 5.5.26 | Sep 15, 2022 | Apr 24, 2015 |
| Suse | — | Upgrade php7-zipUpgrade php7Upgrade php7-mcryptUpgrade php7-dbaUpgrade php7-ldapUpgrade php7-fileinfoUpgrade php7-domUpgrade php7-opcacheUpgrade php7-imapUpgrade php7-jsonUpgrade libsqlite3-0-32bitUpgrade php7-xmlreaderUpgrade php7-pspellUpgrade php7-pearUpgrade php7-calendarUpgrade php7-xmlrpcUpgrade php7-tidyUpgrade php7-readlineUpgrade libsqlite3-0Upgrade php7-gmpUpgrade php7-gdUpgrade php7-sodiumUpgrade php7-shmopUpgrade sqlite3-develUpgrade php7-xslUpgrade php7-sysvshmUpgrade sqlite3-docUpgrade php7-pcntlUpgrade php7-pear-archive_tarUpgrade php7-mysqlUpgrade php72-develUpgrade php7-bz2Upgrade php7-opensslUpgrade php7-pdoUpgrade php7-embedUpgrade apache2-mod_php7Upgrade php7-xmlwriterUpgrade php7-curlUpgrade php7-mbstringUpgrade php7-iconvUpgrade php7-sysvmsgUpgrade php7-fastcgiUpgrade php7-enchantUpgrade php7-posixUpgrade php7-develUpgrade php7-sysvsemUpgrade php7-intlUpgrade php7-odbcUpgrade php7-wddxUpgrade php7-zlibUpgrade php7-ftpUpgrade php7-fpmUpgrade php7-sqliteUpgrade php7-snmpUpgrade php7-bcmathUpgrade php7-socketsUpgrade sqlite3Upgrade php7-tokenizerUpgrade php7-gettextUpgrade php7-ctypeUpgrade php7-soapUpgrade php7-exifUpgrade php7-pharUpgrade php7-pgsql | Dec 22, 2016 | Apr 24, 2015 |
| Ubuntu | — | Upgrade libsqlite3-0 | Nov 8, 2024 | Apr 24, 2015 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub