CVE-2018-8740
In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c.
- Update to 3.8.2-1ubuntu2.2
Published Updated
PatchFirst · Latest vulnerabilities
sqlite3 vulnerabilities
Vulnerabilities published for sqlite3 in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 4
CVE-2013-7443
Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service (crash) via crafted SQL statements.
- Update to 3.8.2-1ubuntu2.1
Published UpdatedCVE-2015-3416
The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement.
- Update to 3.8.2-1ubuntu2.1
Published UpdatedCVE-2015-3414
SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
- Update to 3.8.2-1ubuntu2.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.