In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-lemonalma-upgrade-sqlitealma-upgrade-sqlite-develalma-upgrade-sqlite-docalma-upgrade-sqlite-libs | May 4, 2022 | Jun 27, 2020 | |
| Alpine Linux | alpine-linux-upgrade-sqlite | Oct 1, 2024 | Jun 27, 2020 | |
| Apple Osx Sqlite | apple-osx-security-update-2021-001-catalinaapple-osx-upgrade-latest | Nov 13, 2020 | Jun 27, 2020 | |
| Centos_linux | — | centos-upgrade-lemoncentos-upgrade-lemon-debuginfocentos-upgrade-sqlitecentos-upgrade-sqlite-analyzer-debuginfocentos-upgrade-sqlite-debuginfocentos-upgrade-sqlite-debugsourcecentos-upgrade-sqlite-develcentos-upgrade-sqlite-doccentos-upgrade-sqlite-libscentos-upgrade-sqlite-libs-debuginfocentos-upgrade-sqlite-tcl-debuginfo | Jun 1, 2021 | Jun 27, 2020 |
| Debian | debian-upgrade-sqlite3 | Jul 30, 2024 | Jun 27, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-db-sqlite | Jul 28, 2020 | Jun 27, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-sqlitehuawei-euleros-2_0_sp8-upgrade-sqlite-develhuawei-euleros-2_0_sp8-upgrade-sqlite-dochuawei-euleros-2_0_sp8-upgrade-sqlite-libs | Jul 31, 2020 | Jun 27, 2020 | |
| Oracle Mysql | mysql-upgrade-3_32_3 | Feb 12, 2021 | Jun 27, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-database-sqlite-3-3-32-3-11-4-27-0-1-82-0oracle-solaris-11-4-upgrade-database-sqlite-3-documentation-3-32-3-11-4-27-0-1-82-0oracle-solaris-11-4-upgrade-runtime-tcl-8-tcl-sqlite-3-3-32-3-11-4-27-0-1-82-0 | Jan 19, 2021 | Jun 27, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-lemonoracle-linux-upgrade-sqliteoracle-linux-upgrade-sqlite-develoracle-linux-upgrade-sqlite-docoracle-linux-upgrade-sqlite-libs | May 26, 2021 | Jun 15, 2020 |
| Redhat_linux | redhat-upgrade-lemonredhat-upgrade-lemon-debuginforedhat-upgrade-sqliteredhat-upgrade-sqlite-analyzer-debuginforedhat-upgrade-sqlite-debuginforedhat-upgrade-sqlite-debugsourceredhat-upgrade-sqlite-develredhat-upgrade-sqlite-docredhat-upgrade-sqlite-libsredhat-upgrade-sqlite-libs-debuginforedhat-upgrade-sqlite-tcl-debuginfo | May 21, 2021 | Jun 27, 2020 | |
| Rocky_linux | rocky-upgrade-lemonrocky-upgrade-lemon-debuginforocky-upgrade-sqliterocky-upgrade-sqlite-debuginforocky-upgrade-sqlite-debugsourcerocky-upgrade-sqlite-develrocky-upgrade-sqlite-libsrocky-upgrade-sqlite-libs-debuginfo | Mar 12, 2024 | Jun 27, 2020 | |
| Suse | — | suse-upgrade-libsqlite3-0suse-upgrade-libsqlite3-0-32bitsuse-upgrade-sqlite3suse-upgrade-sqlite3-develsuse-upgrade-sqlite3-doc | Jul 15, 2021 | Jun 27, 2020 |
| Ubuntu | ubuntu-upgrade-libsqlite3-0ubuntu-upgrade-sqlite3 | Aug 5, 2020 | Jun 27, 2020 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub