SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sqlite | Nov 8, 2019 | May 30, 2019 |
| Centos_linux | — | Upgrade sqlite-libs-debuginfoUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-debuginfoUpgrade sqlite-docUpgrade lemon-debuginfoUpgrade sqliteUpgrade sqlite-debugsourceUpgrade sqlite-develUpgrade lemonUpgrade sqlite-tcl-debuginfoUpgrade sqlite-libs | Apr 29, 2020 | May 30, 2019 |
| Debian | — | Upgrade sqlite3Upgrade db5.3 | Jul 30, 2024 | May 30, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 3, 2025 |
| Freebsd | — | Upgrade mysql80-serverUpgrade mysql56-serverUpgrade percona57-serverUpgrade mysql57-serverUpgrade percona56-serverUpgrade percona55-server | Jan 16, 2020 | Jan 15, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sqliteUpgrade sqlite-devel | Dec 4, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sqliteUpgrade sqlite-devel | Sep 25, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sqlite-develUpgrade sqlite | Sep 24, 2019 | May 30, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sqliteUpgrade sqlite-libsUpgrade sqlite-develUpgrade sqlite-doc | Aug 28, 2019 | May 30, 2019 |
| Oracle_linux | — | Upgrade sqlite-develUpgrade lemonUpgrade sqlite-libsUpgrade sqliteUpgrade sqlite-doc | Oct 5, 2022 | Mar 20, 2019 |
| Redhat_linux | — | Upgrade sqlite-debuginfoUpgrade sqliteNo solution existsUpgrade sqlite-debugsourceUpgrade sqlite-libs-debuginfoUpgrade sqlite-tcl-debuginfoUpgrade sqlite-develUpgrade sqlite-docUpgrade lemon-debuginfoUpgrade lemonUpgrade sqlite-libsUpgrade sqlite-analyzer-debuginfo | Apr 29, 2020 | May 30, 2019 |
| Suse | — | Upgrade sqlite3-develUpgrade libsqlite3-0Upgrade sqlite3Upgrade libsqlite3-0-32bit | Jun 15, 2019 | May 30, 2019 |
| Ubuntu | — | Upgrade libdb5.3-sql (Ubuntu Pro)Upgrade db5.3-sql-util (Ubuntu Pro)Upgrade libdb5.3 (Ubuntu Pro)Upgrade sqlite3 (Ubuntu Pro)Upgrade sqlite3Upgrade db5.3-sql-utilUpgrade libdb5.3-sql-dev (Ubuntu Pro)Upgrade libdb5.3-sql-devUpgrade libdb5.3-sqlUpgrade libsqlite3-0 (Ubuntu Pro)Upgrade db5.3-util (Ubuntu Pro)Upgrade libsqlite3-0Upgrade db5.3-utilUpgrade libdb5.3 | Jun 5, 2019 | May 30, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub