exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 18, 2019 |
| Centos_linux | — | Upgrade chromium-browser-debuginfoUpgrade chromium-browser | Feb 18, 2020 | Dec 18, 2019 |
| Debian | — | Upgrade sqlite3Upgrade chromium | Mar 12, 2020 | Dec 18, 2019 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Aug 7, 2020 | Feb 4, 2020 |
| Microsoft Edge | — | Update Microsoft Edge to the latest version | Nov 17, 2021 | Dec 18, 2019 |
| Oracle Solaris | — | Upgrade database/sqlite-3 to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade database/sqlite-3/documentation to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Dec 18, 2019 |
| Redhat_linux | — | Upgrade chromium-browserUpgrade chromium-browser-debuginfoNo solution exists | Feb 18, 2020 | Dec 18, 2019 |
| Suse | — | Upgrade sqlite3-develUpgrade sqlite3-docUpgrade chromiumUpgrade libsqlite3-0Upgrade libre2-0Upgrade sqlite3Upgrade libsqlite3-0-32bitUpgrade re2-develUpgrade chromedriver | Feb 12, 2020 | Dec 18, 2019 |
| Ubuntu | — | Upgrade sqlite3Upgrade libsqlite3-0 | Mar 11, 2020 | Dec 18, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub