Red Hat Security AdvisoryRHSA-2015:1635
sqlite security update
Released 2015-08-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) sqlite-3.7.17-6.el7_1.1
- Red Hat Enterprise Linux Client Optional (v. 7) lemon-3.7.17-6.el7_1.1, sqlite-devel-3.7.17-6.el7_1.1, sqlite-doc-3.7.17-6.el7_1.1 +1
- Red Hat Enterprise Linux ComputeNode (v. 7) sqlite-3.7.17-6.el7_1.1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) lemon-3.7.17-6.el7_1.1, sqlite-devel-3.7.17-6.el7_1.1, sqlite-doc-3.7.17-6.el7_1.1 +1
- Red Hat Enterprise Linux Server (v. 7) sqlite-3.7.17-6.ael7b_1.1, sqlite-3.7.17-6.el7_1.1, sqlite-3.7.17-6.el7_1.1.ppc +3
- Red Hat Enterprise Linux Server Optional (v. 7) lemon-3.7.17-6.ael7b_1.1, lemon-3.7.17-6.el7_1.1, sqlite-doc-3.7.17-6.ael7b_1.1 +3
- Red Hat Enterprise Linux Workstation (v. 7) sqlite-3.7.17-6.el7_1.1, sqlite-devel-3.7.17-6.el7_1.1
- Red Hat Enterprise Linux Workstation Optional (v. 7) lemon-3.7.17-6.el7_1.1, sqlite-doc-3.7.17-6.el7_1.1, sqlite-tcl-3.7.17-6.el7_1.1
Fixes 3 records
Priority MEDIUM 41
The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05418 · Published 2015-04-24 · Partial fix CWE-190
Priority MEDIUM 40
The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly h…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0414 · Published 2015-04-24 · Fixed CWE-404
Priority MEDIUM 40
SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or poss…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0414 · Published 2015-04-24 · Fixed CWE-908
THREATIST.IORead the docs