In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sqlite-libsUpgrade lemonUpgrade sqlite-develUpgrade sqlite-docUpgrade sqlite | May 4, 2022 | Jun 27, 2020 |
| Alpine Linux | — | Upgrade sqlite | Oct 1, 2024 | Jun 27, 2020 |
| Apple Osx Sqlite | — | Apply Apple macOS Security Update 2021-001 CatalinaUpgrade macOS to the latest version | Nov 13, 2020 | Nov 12, 2020 |
| Centos_linux | — | Upgrade sqlite-libs-debuginfoUpgrade sqlite-debugsourceUpgrade sqliteUpgrade sqlite-debuginfoUpgrade lemon-debuginfoUpgrade sqlite-develUpgrade sqlite-libsUpgrade lemonUpgrade sqlite-tcl-debuginfoUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-doc | Jun 1, 2021 | Jun 27, 2020 |
| Debian | — | Upgrade sqlite3 | Jul 30, 2024 | Jun 27, 2020 |
| Gentoo Linux | — | Upgrade dev-db/sqlite. | Jul 28, 2020 | Jun 27, 2020 |
| Google Chrome | — | — | Sep 9, 2022 | Jun 27, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sqlite-libsUpgrade sqliteUpgrade sqlite-develUpgrade sqlite-doc | Jul 31, 2020 | Jun 27, 2020 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 3.32.3 | Feb 12, 2021 | Jun 27, 2020 |
| Oracle Solaris | — | Upgrade database/sqlite-3/documentation to version 3.32.3-11.4.27.0.1.82.0 on Solaris 11.4Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.32.3-11.4.27.0.1.82.0 on Solaris 11.4Upgrade database/sqlite-3 to version 3.32.3-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jun 27, 2020 |
| Oracle_linux | — | Upgrade lemonUpgrade sqlite-libsUpgrade sqlite-docUpgrade sqlite-develUpgrade sqlite | May 26, 2021 | Jun 15, 2020 |
| Redhat_linux | — | Upgrade lemon-debuginfoUpgrade sqlite-docUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-libs-debuginfoUpgrade sqlite-debuginfoUpgrade sqlite-develUpgrade sqlite-tcl-debuginfoUpgrade sqlite-libsUpgrade sqliteUpgrade sqlite-debugsourceUpgrade lemon | May 21, 2021 | Jun 27, 2020 |
| Rocky_linux | — | Upgrade sqlite-libsUpgrade lemon-debuginfoUpgrade lemonUpgrade sqlite-develUpgrade sqliteUpgrade sqlite-libs-debuginfoUpgrade sqlite-debugsourceUpgrade sqlite-debuginfo | Mar 12, 2024 | Jun 27, 2020 |
| Suse | — | Upgrade sqlite3-docUpgrade sqlite3-develUpgrade libsqlite3-0Upgrade libsqlite3-0-32bitUpgrade sqlite3 | Jul 15, 2021 | Jun 27, 2020 |
| Ubuntu | — | Upgrade sqlite3Upgrade libsqlite3-0 | Aug 5, 2020 | Jun 27, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub