CVE-2015-3415
CVE-2015-3415
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.
EPSS 4,1% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
sqlite3 Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.8.9-1
Actualiza a 3.8.9-1
sqlite3 Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.8.9-1
Actualiza a 3.8.9-1
sqlite3 Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.8.9-1
Actualiza a 3.8.9-1
Fuentes originales
- http://rhn.redhat.com/errata/RHSA-2015-1635.html
- http://www.securitytracker.com/id/1033703
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- http://www.securityfocus.com/bid/74228
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
- https://security.gentoo.org/glsa/201507-05
- http://www.ubuntu.com/usn/USN-2698-1
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- https://support.apple.com/HT205267
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html
- https://www.sqlite.org/src/info/02e3c88fbf6abdcf3975fb0fb71972b0ab30da30
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:217
- https://support.apple.com/HT205213
- http://www.debian.org/security/2015/dsa-3252
- http://seclists.org/fulldisclosure/2015/Apr/31
- https://nvd.nist.gov/vuln/detail/CVE-2015-3415