Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-54620

Опубликовано: 29 июл. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий

Описание

(sqlite3 provides Ruby bindings for the SQLite3 embedded database. From ...)

РелизСтатусПримечание
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

Показывать по

EPSS

Процентиль: 1%
0.00107
Низкий

Связанные уязвимости

CVSS3: 4.5
redhat
7 дней назад

A flaw was found in sqlite3-ruby, a Ruby binding for the SQLite3 embedded database. This vulnerability occurs because callbacks used for SQLite aggregate functions can be prematurely freed while still being referenced during aggregation. A local attacker could potentially exploit this use-after-free condition to cause unpredictable application behavior, which may lead to information disclosure or a denial of service (DoS).

nvd
7 дней назад

sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks used for SQLite aggregate functions can be freed while still referenced during aggregation, resulting in a use-after-free. This issue is fixed in version 2.9.5.

debian
7 дней назад

sqlite3 provides Ruby bindings for the SQLite3 embedded database. From ...

github
7 дней назад

sqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks

EPSS

Процентиль: 1%
0.00107
Низкий