SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-sqlite | Nov 8, 2019 | May 30, 2019 | |
| Centos_linux | — | centos-upgrade-lemoncentos-upgrade-lemon-debuginfocentos-upgrade-sqlitecentos-upgrade-sqlite-analyzer-debuginfocentos-upgrade-sqlite-debuginfocentos-upgrade-sqlite-debugsourcecentos-upgrade-sqlite-develcentos-upgrade-sqlite-doccentos-upgrade-sqlite-libscentos-upgrade-sqlite-libs-debuginfocentos-upgrade-sqlite-tcl-debuginfo | Apr 29, 2020 | May 30, 2019 |
| Debian | debian-upgrade-db5-3debian-upgrade-sqlite3 | Jul 30, 2024 | May 30, 2019 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Dec 3, 2025 | |
| Freebsd | freebsd-upgrade-package-mysql56-serverfreebsd-upgrade-package-mysql57-serverfreebsd-upgrade-package-mysql80-serverfreebsd-upgrade-package-percona55-serverfreebsd-upgrade-package-percona56-serverfreebsd-upgrade-package-percona57-server | Jan 16, 2020 | Jan 15, 2020 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-sqlitehuawei-euleros-2_0_sp2-upgrade-sqlite-devel | Dec 4, 2019 | May 30, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-sqlitehuawei-euleros-2_0_sp3-upgrade-sqlite-devel | Sep 25, 2019 | May 30, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-sqlitehuawei-euleros-2_0_sp5-upgrade-sqlite-devel | Sep 24, 2019 | May 30, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-sqlitehuawei-euleros-2_0_sp8-upgrade-sqlite-develhuawei-euleros-2_0_sp8-upgrade-sqlite-dochuawei-euleros-2_0_sp8-upgrade-sqlite-libs | Aug 28, 2019 | May 30, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-lemonoracle-linux-upgrade-sqliteoracle-linux-upgrade-sqlite-develoracle-linux-upgrade-sqlite-docoracle-linux-upgrade-sqlite-libs | Oct 5, 2022 | Mar 20, 2019 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-lemonredhat-upgrade-lemon-debuginforedhat-upgrade-sqliteredhat-upgrade-sqlite-analyzer-debuginforedhat-upgrade-sqlite-debuginforedhat-upgrade-sqlite-debugsourceredhat-upgrade-sqlite-develredhat-upgrade-sqlite-docredhat-upgrade-sqlite-libsredhat-upgrade-sqlite-libs-debuginforedhat-upgrade-sqlite-tcl-debuginfo | Apr 29, 2020 | May 30, 2019 | |
| Suse | — | suse-upgrade-libsqlite3-0suse-upgrade-libsqlite3-0-32bitsuse-upgrade-sqlite3suse-upgrade-sqlite3-devel | Jun 15, 2019 | May 30, 2019 |
| Ubuntu | ubuntu-pro-upgrade-db5-3-sql-utilubuntu-pro-upgrade-db5-3-utilubuntu-pro-upgrade-libdb5-3ubuntu-pro-upgrade-libdb5-3-sqlubuntu-pro-upgrade-libdb5-3-sql-devubuntu-pro-upgrade-libsqlite3-0ubuntu-pro-upgrade-sqlite3ubuntu-upgrade-db5-3-sql-utilubuntu-upgrade-db5-3-utilubuntu-upgrade-libdb5-3ubuntu-upgrade-libdb5-3-sqlubuntu-upgrade-libdb5-3-sql-devubuntu-upgrade-libsqlite3-0ubuntu-upgrade-sqlite3 | Jun 5, 2019 | May 30, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | May 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub