In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-mingw-binutils-genericalma-upgrade-mingw-filesystem-basealma-upgrade-mingw32-binutilsalma-upgrade-mingw32-bzip2alma-upgrade-mingw32-bzip2-staticalma-upgrade-mingw32-filesystemalma-upgrade-mingw32-sqlitealma-upgrade-mingw32-sqlite-staticalma-upgrade-mingw64-binutilsalma-upgrade-mingw64-bzip2alma-upgrade-mingw64-bzip2-staticalma-upgrade-mingw64-filesystemalma-upgrade-mingw64-sqlitealma-upgrade-mingw64-sqlite-static | May 4, 2022 | Sep 9, 2019 | |
| Alpine Linux | alpine-linux-upgrade-sqlite | Nov 8, 2019 | Sep 9, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-java-11-amazon-correttoamazon-linux-ami-2-upgrade-java-11-amazon-corretto-headlessamazon-linux-ami-2-upgrade-java-11-amazon-corretto-javadoc | Apr 27, 2020 | Sep 9, 2019 | |
| Centos_linux | — | centos-upgrade-lemoncentos-upgrade-lemon-debuginfocentos-upgrade-sqlitecentos-upgrade-sqlite-analyzer-debuginfocentos-upgrade-sqlite-debuginfocentos-upgrade-sqlite-debugsourcecentos-upgrade-sqlite-develcentos-upgrade-sqlite-doccentos-upgrade-sqlite-libscentos-upgrade-sqlite-libs-debuginfocentos-upgrade-sqlite-tcl-debuginfo | Nov 5, 2020 | Sep 9, 2019 |
| Debian | debian-upgrade-sqlite3 | Aug 24, 2020 | Sep 9, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-db-sqlite | Mar 16, 2020 | Sep 9, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-sqlitehuawei-euleros-2_0_sp8-upgrade-sqlite-develhuawei-euleros-2_0_sp8-upgrade-sqlite-dochuawei-euleros-2_0_sp8-upgrade-sqlite-libs | Nov 19, 2019 | Sep 9, 2019 | |
| Jre Vuln | jre-upgrade-latest | Mar 2, 2020 | Sep 9, 2019 | |
| Oracle Mysql | mysql-upgrade-latest | May 14, 2021 | Sep 9, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-database-sqlite-3-3-29-0-11-4-18-0-1-1-0oracle-solaris-11-4-upgrade-database-sqlite-3-documentation-3-29-0-11-4-18-0-1-1-0oracle-solaris-11-4-upgrade-runtime-tcl-8-tcl-sqlite-3-3-29-0-11-4-18-0-1-1-0 | Jan 19, 2021 | Sep 9, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-lemonoracle-linux-upgrade-sqliteoracle-linux-upgrade-sqlite-develoracle-linux-upgrade-sqlite-docoracle-linux-upgrade-sqlite-libs | Nov 12, 2020 | Aug 15, 2019 |
| Redhat_linux | redhat-upgrade-lemonredhat-upgrade-lemon-debuginforedhat-upgrade-mingw-binutils-debuginforedhat-upgrade-mingw-binutils-debugsourceredhat-upgrade-mingw-binutils-genericredhat-upgrade-mingw-binutils-generic-debuginforedhat-upgrade-mingw-filesystem-baseredhat-upgrade-mingw32-binutilsredhat-upgrade-mingw32-binutils-debuginforedhat-upgrade-mingw32-bzip2redhat-upgrade-mingw32-bzip2-debuginforedhat-upgrade-mingw32-bzip2-staticredhat-upgrade-mingw32-filesystemredhat-upgrade-mingw32-sqliteredhat-upgrade-mingw32-sqlite-debuginforedhat-upgrade-mingw32-sqlite-staticredhat-upgrade-mingw64-binutilsredhat-upgrade-mingw64-binutils-debuginforedhat-upgrade-mingw64-bzip2redhat-upgrade-mingw64-bzip2-debuginforedhat-upgrade-mingw64-bzip2-staticredhat-upgrade-mingw64-filesystemredhat-upgrade-mingw64-sqliteredhat-upgrade-mingw64-sqlite-debuginforedhat-upgrade-mingw64-sqlite-staticredhat-upgrade-sqliteredhat-upgrade-sqlite-analyzer-debuginforedhat-upgrade-sqlite-debuginforedhat-upgrade-sqlite-debugsourceredhat-upgrade-sqlite-develredhat-upgrade-sqlite-docredhat-upgrade-sqlite-libsredhat-upgrade-sqlite-libs-debuginforedhat-upgrade-sqlite-tcl-debuginfo | Nov 5, 2020 | Sep 9, 2019 | |
| Rocky_linux | rocky-upgrade-mingw-binutils-debuginforocky-upgrade-mingw-binutils-debugsourcerocky-upgrade-mingw-binutils-genericrocky-upgrade-mingw-binutils-generic-debuginforocky-upgrade-mingw32-binutilsrocky-upgrade-mingw32-binutils-debuginforocky-upgrade-mingw64-binutilsrocky-upgrade-mingw64-binutils-debuginfo | Jan 8, 2026 | Jan 7, 2026 | |
| Suse | — | suse-upgrade-libsqlite3-0suse-upgrade-libsqlite3-0-32bitsuse-upgrade-sqlite3suse-upgrade-sqlite3-develsuse-upgrade-sqlite3-doc | Oct 4, 2019 | Sep 9, 2019 |
| Ubuntu | ubuntu-upgrade-libsqlite3-0ubuntu-upgrade-sqlite3 | Dec 3, 2019 | Sep 9, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Sep 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub