Описание
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| sqlite3 | fixed | 3.32.0-1 | package | |
| sqlite3 | fixed | 3.27.2-3+deb10u1 | buster | package |
| sqlite3 | not-affected | jessie | package | |
| sqlite | not-affected | package |
Примечания
https://bugs.chromium.org/p/chromium/issues/detail?id=1080459
https://sqlite.org/src/info/a4dd148928ea65bd
https://github.com/sqlite/sqlite/commit/219b8e7e7587df8669d96ce867cdd61ca1c05730
EPSS
Процентиль: 20%
0.00064
Низкий
Связанные уязвимости
CVSS3: 5.5
ubuntu
больше 5 лет назад
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
CVSS3: 5.5
redhat
больше 5 лет назад
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
CVSS3: 5.5
nvd
больше 5 лет назад
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
CVSS3: 5.5
github
больше 3 лет назад
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
EPSS
Процентиль: 20%
0.00064
Низкий