Kritik CVSS 9.8
CVE-2019-8457: Sqlite: sınır dışı okuma
Açıklama (NVD)
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
Özet bilgiler
- Ürün
- Sqlite Sqlite
- CVSS v3.1
- 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %45,43 (yüzdelik 99)
- CWE
- CWE-125
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| sqlite-sqlite | 3.6.0 | 3.27.2 | — |
| canonical-ubuntu-linux | 14.04 | 14.04 | — |
| canonical-ubuntu-linux | 16.04 | 16.04 | — |
| canonical-ubuntu-linux | 18.04 | 18.04 | — |
| canonical-ubuntu-linux | 18.10 | 18.10 | — |
| canonical-ubuntu-linux | 19.04 | 19.04 | — |
| fedoraproject-fedora | 29 | 29 | — |
| fedoraproject-fedora | 30 | 30 | — |
| opensuse-leap | 42.3 | 42.3 | — |
Kaynaklar
- NVD kaydı
- lists.opensuse.org
- kc.mcafee.com
- lists.fedoraproject.org
- lists.fedoraproject.org
- security.netapp.com
- usn.ubuntu.com
- usn.ubuntu.com
- usn.ubuntu.com
- usn.ubuntu.com
- www.oracle.com
- www.oracle.com
- www.oracle.com
- www.oracle.com
- www.sqlite.org
- www.sqlite.org
- lists.opensuse.org
- kc.mcafee.com
- lists.fedoraproject.org
- lists.fedoraproject.org
- security.netapp.com
- usn.ubuntu.com
- usn.ubuntu.com
- usn.ubuntu.com
- usn.ubuntu.com
- CWE-125