SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sqlite | Nov 8, 2019 | May 30, 2019 |
| Centos_linux | — | Upgrade sqliteUpgrade sqlite-libsUpgrade lemonUpgrade sqlite-tcl-debuginfoUpgrade sqlite-debugsourceUpgrade sqlite-develUpgrade sqlite-analyzer-debuginfoUpgrade lemon-debuginfoUpgrade sqlite-docUpgrade sqlite-libs-debuginfoUpgrade sqlite-debuginfo | Apr 29, 2020 | May 30, 2019 |
| Debian | — | Upgrade db5.3Upgrade sqlite3 | Jul 30, 2024 | May 30, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 3, 2025 |
| Freebsd | — | Upgrade mysql80-serverUpgrade mysql57-serverUpgrade percona57-serverUpgrade mysql56-serverUpgrade percona56-serverUpgrade percona55-server | Jan 16, 2020 | Jan 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sqliteUpgrade sqlite-devel | Dec 4, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sqlite-develUpgrade sqlite | Sep 25, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sqlite-develUpgrade sqlite | Sep 24, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sqliteUpgrade sqlite-develUpgrade sqlite-libsUpgrade sqlite-doc | Aug 28, 2019 | May 30, 2019 |
| Oracle_linux | — | Upgrade lemonUpgrade sqlite-libsUpgrade sqlite-develUpgrade sqlite-docUpgrade sqlite | Oct 5, 2022 | Mar 20, 2019 |
| Redhat_linux | — | Upgrade sqlite-analyzer-debuginfoUpgrade sqlite-tcl-debuginfoUpgrade lemonUpgrade sqlite-develUpgrade sqlite-docUpgrade lemon-debuginfoUpgrade sqlite-libsUpgrade sqliteUpgrade sqlite-debuginfoUpgrade sqlite-debugsourceUpgrade sqlite-libs-debuginfoNo solution exists | Apr 29, 2020 | May 30, 2019 |
| Suse | — | Upgrade libsqlite3-0-32bitUpgrade sqlite3Upgrade sqlite3-develUpgrade libsqlite3-0 | Jun 15, 2019 | May 30, 2019 |
| Ubuntu | — | Upgrade db5.3-util (Ubuntu Pro)Upgrade libdb5.3-sqlUpgrade libdb5.3Upgrade libdb5.3-sql-devUpgrade libdb5.3-sql-dev (Ubuntu Pro)Upgrade db5.3-sql-utilUpgrade db5.3-utilUpgrade libsqlite3-0Upgrade libsqlite3-0 (Ubuntu Pro)Upgrade sqlite3Upgrade libdb5.3-sql (Ubuntu Pro)Upgrade db5.3-sql-util (Ubuntu Pro)Upgrade libdb5.3 (Ubuntu Pro)Upgrade sqlite3 (Ubuntu Pro) | Jun 5, 2019 | May 30, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub