In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sqlite-docUpgrade sqliteUpgrade lemonUpgrade sqlite-develUpgrade sqlite-libs | May 4, 2022 | Jun 27, 2020 |
| Alpine Linux | — | Upgrade sqlite | Oct 1, 2024 | Jun 27, 2020 |
| Apple Osx Sqlite | — | Upgrade macOS to the latest versionApply Apple macOS Security Update 2021-001 Catalina | Nov 13, 2020 | Nov 12, 2020 |
| Centos_linux | — | Upgrade sqlite-debuginfoUpgrade sqlite-libs-debuginfoUpgrade sqliteUpgrade sqlite-debugsourceUpgrade sqlite-libsUpgrade sqlite-develUpgrade sqlite-analyzer-debuginfoUpgrade sqlite-tcl-debuginfoUpgrade sqlite-docUpgrade lemon-debuginfoUpgrade lemon | Jun 1, 2021 | Jun 27, 2020 |
| Debian | — | Upgrade sqlite3 | Jul 30, 2024 | Jun 27, 2020 |
| Gentoo Linux | — | Upgrade dev-db/sqlite. | Jul 28, 2020 | Jun 27, 2020 |
| Google Chrome | — | — | Sep 9, 2022 | Jun 27, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sqliteUpgrade sqlite-docUpgrade sqlite-libsUpgrade sqlite-devel | Jul 31, 2020 | Jun 27, 2020 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 3.32.3 | Feb 12, 2021 | Jun 27, 2020 |
| Oracle Solaris | — | Upgrade database/sqlite-3/documentation to version 3.32.3-11.4.27.0.1.82.0 on Solaris 11.4Upgrade database/sqlite-3 to version 3.32.3-11.4.27.0.1.82.0 on Solaris 11.4Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.32.3-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jun 27, 2020 |
| Oracle_linux | — | Upgrade sqlite-develUpgrade sqlite-docUpgrade lemonUpgrade sqliteUpgrade sqlite-libs | May 26, 2021 | Jun 15, 2020 |
| Redhat_linux | — | Upgrade sqlite-analyzer-debuginfoUpgrade sqlite-libs-debuginfoUpgrade sqlite-docUpgrade lemon-debuginfoUpgrade sqlite-debuginfoUpgrade sqlite-develUpgrade lemonUpgrade sqlite-tcl-debuginfoUpgrade sqliteUpgrade sqlite-libsUpgrade sqlite-debugsource | May 21, 2021 | Jun 27, 2020 |
| Rocky_linux | — | Upgrade lemonUpgrade lemon-debuginfoUpgrade sqliteUpgrade sqlite-develUpgrade sqlite-libsUpgrade sqlite-libs-debuginfoUpgrade sqlite-debuginfoUpgrade sqlite-debugsource | Mar 12, 2024 | Jun 27, 2020 |
| Suse | — | Upgrade sqlite3-develUpgrade sqlite3-docUpgrade sqlite3Upgrade libsqlite3-0-32bitUpgrade libsqlite3-0 | Jul 15, 2021 | Jun 27, 2020 |
| Ubuntu | — | Upgrade libsqlite3-0Upgrade sqlite3 | Aug 5, 2020 | Jun 27, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub