SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sqlite | Nov 8, 2019 | May 30, 2019 |
| Centos_linux | — | Upgrade sqlite-libsUpgrade sqlite-debugsourceUpgrade lemonUpgrade sqliteUpgrade sqlite-tcl-debuginfoUpgrade sqlite-develUpgrade sqlite-debuginfoUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-libs-debuginfoUpgrade lemon-debuginfoUpgrade sqlite-doc | Apr 29, 2020 | May 30, 2019 |
| Debian | — | Upgrade sqlite3Upgrade db5.3 | Jul 30, 2024 | May 30, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 3, 2025 |
| Freebsd | — | Upgrade percona56-serverUpgrade percona55-serverUpgrade percona57-serverUpgrade mysql57-serverUpgrade mysql56-serverUpgrade mysql80-server | Jan 16, 2020 | Jan 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sqliteUpgrade sqlite-devel | Dec 4, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sqlite-develUpgrade sqlite | Sep 25, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sqlite-develUpgrade sqlite | Sep 24, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sqlite-libsUpgrade sqliteUpgrade sqlite-develUpgrade sqlite-doc | Aug 28, 2019 | May 30, 2019 |
| Oracle_linux | — | Upgrade sqliteUpgrade sqlite-docUpgrade lemonUpgrade sqlite-develUpgrade sqlite-libs | Oct 5, 2022 | Mar 20, 2019 |
| Redhat_linux | — | Upgrade lemonUpgrade sqlite-tcl-debuginfoUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-develUpgrade sqlite-libsUpgrade sqlite-docUpgrade lemon-debuginfoUpgrade sqlite-libs-debuginfoNo solution existsUpgrade sqlite-debugsourceUpgrade sqliteUpgrade sqlite-debuginfo | Apr 29, 2020 | May 30, 2019 |
| Suse | — | Upgrade libsqlite3-0-32bitUpgrade sqlite3Upgrade libsqlite3-0Upgrade sqlite3-devel | Jun 15, 2019 | May 30, 2019 |
| Ubuntu | — | Upgrade libsqlite3-0 (Ubuntu Pro)Upgrade db5.3-util (Ubuntu Pro)Upgrade db5.3-sql-utilUpgrade libdb5.3-sql-dev (Ubuntu Pro)Upgrade libdb5.3-sqlUpgrade libdb5.3Upgrade libsqlite3-0Upgrade libdb5.3-sql-devUpgrade db5.3-utilUpgrade libdb5.3-sql (Ubuntu Pro)Upgrade sqlite3 (Ubuntu Pro)Upgrade libdb5.3 (Ubuntu Pro)Upgrade sqlite3Upgrade db5.3-sql-util (Ubuntu Pro) | Jun 5, 2019 | May 30, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub