Описание
SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
A NULL pointer dereference flaw was found in SQLite when rewriting select statements for window functions. This flaw allows an attacker who can execute SQL statements, to crash the application, resulting in a denial of service.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | sqlite | Out of support scope | ||
| Red Hat Enterprise Linux 6 | sqlite | Out of support scope | ||
| Red Hat Enterprise Linux 7 | sqlite | Will not fix | ||
| Red Hat Enterprise Linux 8 | sqlite | Fixed | RHSA-2021:4396 | 09.11.2021 |
| Red Hat Enterprise Linux 8 | sqlite | Fixed | RHSA-2021:4396 | 09.11.2021 |
| Red Hat Openshift Data Foundation 4.19 | registry.redhat.io/odf4/cephcsi-rhel9 | Fixed | RHSA-2025:16504 | 23.09.2025 |
| Red Hat Openshift Data Foundation 4.19 | registry.redhat.io/odf4/cephcsi-rhel9-operator | Fixed | RHSA-2025:16504 | 23.09.2025 |
| Red Hat Openshift Data Foundation 4.19 | registry.redhat.io/odf4/mcg-core-rhel9 | Fixed | RHSA-2025:16504 | 23.09.2025 |
| Red Hat Openshift Data Foundation 4.19 | registry.redhat.io/odf4/mcg-rhel9-operator | Fixed | RHSA-2025:16504 | 23.09.2025 |
| Red Hat Openshift Data Foundation 4.19 | registry.redhat.io/odf4/ocs-client-console-rhel9 | Fixed | RHSA-2025:16504 | 23.09.2025 |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=1841231sqlite: NULL pointer dereference in sqlite3ExprCodeTarget()
EPSS
Процентиль: 4%
0.0002
Низкий
5.5 Medium
CVSS3
Связанные уязвимости
CVSS3: 5.5
ubuntu
больше 5 лет назад
SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
CVSS3: 5.5
nvd
больше 5 лет назад
SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
CVSS3: 5.5
debian
больше 5 лет назад
SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarge ...
CVSS3: 5.5
github
больше 3 лет назад
SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
EPSS
Процентиль: 4%
0.0002
Низкий
5.5 Medium
CVSS3