CVE-2018-8740
In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c.
- Обновитесь до 3.8.2-1ubuntu2.2
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости sqlite3
За последние 30 дней в sqlite3 опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 4
CVE-2013-7443
Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service (crash) via crafted SQL statements.
- Обновитесь до 3.8.2-1ubuntu2.1
Опубликовано ОбновленоCVE-2015-3416
The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement.
- Обновитесь до 3.8.2-1ubuntu2.1
Опубликовано ОбновленоCVE-2015-3414
SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
- Обновитесь до 3.8.2-1ubuntu2.1
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.