In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade sqlite3 | Jul 30, 2024 | Apr 9, 2020 |
| Gentoo Linux | — | Upgrade dev-db/sqlite. | Jul 28, 2020 | Apr 9, 2020 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.23 | Apr 8, 2021 | Apr 9, 2020 |
| Oracle Solaris | — | Upgrade database/sqlite-3/documentation to version 3.31.1-11.4.22.0.1.69.4 on Solaris 11.4Upgrade database/sqlite-3 to version 3.31.1-11.4.22.0.1.69.4 on Solaris 11.4Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.31.1-11.4.22.0.1.69.4 on Solaris 11.4 | Jan 19, 2021 | Apr 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 9, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub