Описание
SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | |
| esm-infra-legacy/trusty | not-affected | |
| lucid | not-affected | |
| precise | not-affected | |
| trusty | not-affected | |
| trusty/esm | not-affected | |
| upstream | not-affected | |
| utopic | not-affected | |
| vivid | not-affected |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 3.8.10.2-1 |
| esm-infra-legacy/trusty | not-affected | 3.8.2-1ubuntu2.1 |
| lucid | ignored | end of life |
| precise | not-affected | code not present |
| trusty | released | 3.8.2-1ubuntu2.1 |
| trusty/esm | not-affected | 3.8.2-1ubuntu2.1 |
| upstream | released | 3.8.9 |
| utopic | ignored | end of life |
| vivid | released | 3.8.7.4-1ubuntu0.1 |
| vivid/stable-phone-overlay | released | 3.8.7.4-1ubuntu0.1 |
Показывать по
7.5 High
CVSS2
Связанные уязвимости
SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
SQLite before 3.8.9 does not properly implement the dequoting of colla ...
SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
7.5 High
CVSS2