Vulnerability CVE-2017-15286: Information

Description

SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.

Severity: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2017-15286
Published: Oct. 12, 2017
Modified: Oct. 27, 2017
Error type identifier: CWE-476

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
sqlite3sisyphus3.22.0-alt13.44.2-alt1ALT-PU-2018-1493-1202919Fixed
sqlite3p103.22.0-alt13.35.5-alt1.p10.1ALT-PU-2018-1493-1202919Fixed
sqlite3p93.22.0-alt13.33.0-alt1ALT-PU-2018-1493-1202919Fixed
sqlite3p83.22.0-alt0.M80P.13.22.0-alt0.M80P.1ALT-PU-2019-2194-1216874Fixed
sqlite3c10f13.22.0-alt13.35.5-alt1.p10.1ALT-PU-2018-1493-1202919Fixed
sqlite3c9f23.22.0-alt13.36.0-alt2ALT-PU-2018-1493-1202919Fixed
sqlite3c73.22.0-alt0.M70C.13.22.0-alt0.M70C.1ALT-PU-2019-2343-1234994Fixed
sqlite3p113.22.0-alt13.44.2-alt1ALT-PU-2018-1493-1202919Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://github.com/Ha0Team/crash-of-sqlite3/blob/master/poc.md
  • Exploit
  • Third Party Advisory
101285
  • Third Party Advisory
  • VDB Entry

    1. Configuration 1

      cpe:2.3:a:sqlite:sqlite:3.20.1:*:*:*:*:*:*:*
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top