A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally allowed to execute commands). This report does NOT imply any problem in the SQLite library.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Sqlite | apple-osx-upgrade-latest | Nov 29, 2022 | Aug 24, 2021 | |
| Debian | debian-upgrade-sqlite3 | Jul 30, 2024 | Aug 24, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-sqlitehuawei-euleros-2_0_sp8-upgrade-sqlite-develhuawei-euleros-2_0_sp8-upgrade-sqlite-dochuawei-euleros-2_0_sp8-upgrade-sqlite-libs | Nov 2, 2021 | Aug 24, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-sqlite | Nov 12, 2021 | Aug 24, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-database-sqlite-3-3-35-5-11-4-39-0-1-107-0oracle-solaris-11-4-upgrade-database-sqlite-3-documentation-3-35-5-11-4-39-0-1-107-0oracle-solaris-11-4-upgrade-runtime-tcl-8-tcl-sqlite-3-3-35-5-11-4-39-0-1-107-0 | Nov 17, 2021 | Aug 24, 2021 | |
| Suse | — | suse-upgrade-libsqlite3-0suse-upgrade-libsqlite3-0-32bitsuse-upgrade-sqlite3suse-upgrade-sqlite3-develsuse-upgrade-sqlite3-docsuse-upgrade-sqlite3-tcl | Oct 26, 2022 | Aug 24, 2021 |
| Ubuntu | ubuntu-upgrade-sqlite3 | May 6, 2022 | Aug 24, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub