SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sqlite | Nov 8, 2019 | May 30, 2019 |
| Centos_linux | — | Upgrade sqlite-libs-debuginfoUpgrade lemon-debuginfoUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-docUpgrade sqlite-debuginfoUpgrade sqlite-debugsourceUpgrade sqlite-libsUpgrade sqliteUpgrade sqlite-develUpgrade sqlite-tcl-debuginfoUpgrade lemon | Apr 29, 2020 | May 30, 2019 |
| Debian | — | Upgrade sqlite3Upgrade db5.3 | Jul 30, 2024 | May 30, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 3, 2025 |
| Freebsd | — | Upgrade percona55-serverUpgrade percona56-serverUpgrade mysql56-serverUpgrade percona57-serverUpgrade mysql80-serverUpgrade mysql57-server | Jan 16, 2020 | Jan 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sqlite-develUpgrade sqlite | Dec 4, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sqlite-develUpgrade sqlite | Sep 25, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sqliteUpgrade sqlite-devel | Sep 24, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sqlite-develUpgrade sqlite-libsUpgrade sqliteUpgrade sqlite-doc | Aug 28, 2019 | May 30, 2019 |
| Oracle_linux | — | Upgrade sqlite-develUpgrade sqlite-libsUpgrade lemonUpgrade sqlite-docUpgrade sqlite | Oct 5, 2022 | Mar 20, 2019 |
| Redhat_linux | — | Upgrade sqliteUpgrade sqlite-debuginfoUpgrade sqlite-debugsourceUpgrade sqlite-libs-debuginfoNo solution existsUpgrade lemon-debuginfoUpgrade sqlite-libsUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-develUpgrade sqlite-docUpgrade sqlite-tcl-debuginfoUpgrade lemon | Apr 29, 2020 | May 30, 2019 |
| Suse | — | Upgrade sqlite3Upgrade libsqlite3-0-32bitUpgrade sqlite3-develUpgrade libsqlite3-0 | Jun 15, 2019 | May 30, 2019 |
| Ubuntu | — | Upgrade db5.3-utilUpgrade libdb5.3Upgrade libdb5.3-sqlUpgrade db5.3-sql-utilUpgrade libsqlite3-0 (Ubuntu Pro)Upgrade db5.3-util (Ubuntu Pro)Upgrade libdb5.3-sql-dev (Ubuntu Pro)Upgrade libdb5.3-sql-devUpgrade libsqlite3-0Upgrade sqlite3Upgrade sqlite3 (Ubuntu Pro)Upgrade libdb5.3 (Ubuntu Pro)Upgrade db5.3-sql-util (Ubuntu Pro)Upgrade libdb5.3-sql (Ubuntu Pro) | Jun 5, 2019 | May 30, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub