CVE-2018-8740
In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c.
- Mettez à jour vers 3.8.2-1ubuntu2.2
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de sqlite3
Vulnérabilité publiée pour sqlite3 au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 4
CVE-2013-7443
Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service (crash) via crafted SQL statements.
- Mettez à jour vers 3.8.2-1ubuntu2.1
Publication Mise à jourCVE-2015-3416
The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement.
- Mettez à jour vers 3.8.2-1ubuntu2.1
Publication Mise à jourCVE-2015-3414
SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
- Mettez à jour vers 3.8.2-1ubuntu2.1
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.