CVE-2017-13685

Опубликовано: 29 авг. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file.

Ссылки

http://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg105314.html
Mailing List
Vendor Advisory
http://www.securityfocus.com/bid/100521
https://usn.ubuntu.com/4019-1/
https://usn.ubuntu.com/4019-2/
http://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg105314.html
Mailing List
Vendor Advisory
http://www.securityfocus.com/bid/100521
https://usn.ubuntu.com/4019-1/
https://usn.ubuntu.com/4019-2/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sqlite:sqlite:3.20.0:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01825

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2017-13685

CVSS3: 5.5

ubuntu

почти 9 лет назад

The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file.

CVE-2017-13685

CVSS3: 3.3

redhat

почти 9 лет назад

The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file.

CVE-2017-13685

CVSS3: 5.5

debian

почти 9 лет назад

The dump_callback function in SQLite 3.20.0 allows remote attackers to ...

GHSA-69wm-j7rv-57pp

CVSS3: 5.5

github

больше 4 лет назад

The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file.

EPSS

Процентиль: 77%

0.01825

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20