Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-15286

Опубликовано: 12 окт. 2017
Источник: debian
EPSS Низкий

Описание

SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
sqlite3fixed3.20.1-2package
sqlite3not-affectedstretchpackage
sqlite3not-affectedjessiepackage
sqlite3not-affectedwheezypackage
sqlitenot-affectedpackage

Примечания

  • https://github.com/Ha0Team/crash-of-sqlite3/blob/master/poc.md

  • https://www.sqlite.org/src/info/5d0ceb8dcdef92cd

EPSS

Процентиль: 86%
0.02902
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 9 лет назад

SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.

CVSS3: 3.3
redhat
почти 9 лет назад

SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.

CVSS3: 7.5
nvd
почти 9 лет назад

SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.

CVSS3: 7.5
github
больше 4 лет назад

SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.

EPSS

Процентиль: 86%
0.02902
Низкий