Description
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a SQLite
From 3.6.0 to 3.27.2 includingaffected
References
- https://usn.ubuntu.com/4004-1/ ↗
- https://usn.ubuntu.com/4004-2/ ↗
- https://usn.ubuntu.com/4019-1/ ↗
- https://usn.ubuntu.com/4019-2/ ↗
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00074.html ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJPFGA45DI4F5MCF2OAACGH3HQOF4G3M/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPKYSWCOM3CL66RI76TYVIG6TJ263RXH/ ↗
- https://www.oracle.com/security-alerts/cpuapr2020.html ↗
- https://www.oracle.com/security-alerts/cpujul2020.html ↗
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html ↗
- https://www.oracle.com/security-alerts/cpujan2020.html ↗
- https://www.sqlite.org/src/info/90acdbfce9c08858 ↗
- https://www.sqlite.org/releaselog/3_28_0.html ↗
- https://security.netapp.com/advisory/ntap-20190606-0002/ ↗
- https://kc.mcafee.com/corporate/index?page=content&id=SB10365 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html ↗