Описание
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| sqlite3 | fixed | 3.32.1-1 | package | |
| sqlite3 | fixed | 3.27.2-3+deb10u1 | buster | package |
| sqlite | removed | package | ||
| sqlite | not-affected | buster | package |
Примечания
https://www.sqlite.org/src/info/23439ea582241138
https://www.sqlite.org/src/info/d08d3405878d394e
https://github.com/sqlite/sqlite/commit/dd6c33d372f3b83f4fe57904c2bd5ebba5c38018
floating point precision limit safeguards are present in sqlite (V2), refactoring in V3 made it vulnerable.
Связанные уязвимости
CVSS3: 5.5
ubuntu
больше 5 лет назад
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
CVSS3: 5.5
redhat
больше 5 лет назад
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
CVSS3: 5.5
nvd
больше 5 лет назад
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
CVSS3: 5.5
github
больше 3 лет назад
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.