CVE-2021-36690
24.08.2021, 14:15
A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally allowed to execute commands). This report does NOT imply any problem in the SQLite library.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| sqlite | sqlite | 3.36.0 |
| oracle | zfs_storage_appliance_kit | 8.8 |
| apple | iphone_os | 𝑥 < 16.0 |
| apple | macos | 𝑥 < 13.0 |
| apple | tvos | 𝑥 < 16.0 |
| apple | watchos | 𝑥 < 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| sqlite |
| ||||||||||||||
| sqlite3 |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libsqlite3-0 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||
| libsqlite3-0-32bit |
| ||||||||||||||||||||||||||||||||||||||||||||||||||
| sqlite3 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||
| sqlite3-devel |
| ||||||||||||||||||||||||||||||||||||||||||||||||||
| sqlite3-tcl |
|
References