CVE-2015-3414
Fixed in a distro release EPSS 4%
SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
Products: sqlite, apple mac_os_x, apple watchos, debian_linux, canonical ubuntu_linux, php
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sqlite3 | 3.8.9-1 |
| Debian 13 | sqlite3 | 3.8.9-1 |
| Debian 14 | sqlite3 | 3.8.9-1 |
| Debian 8 | sqlite3 | 3.8.7.1-1+deb8u1 |
| Red Hat Enterprise Linux 7 | lemon | 0:3.7.17-6.el7_1.1 |
| Red Hat Enterprise Linux 7 | lemon | 0:3.7.17-6.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | sqlite | 0:3.7.17-6.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | sqlite | 0:3.7.17-6.el7_1.1 |
| Red Hat Enterprise Linux 7 | sqlite-debuginfo | 0:3.7.17-6.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | sqlite-debuginfo | 0:3.7.17-6.el7_1.1 |
| Red Hat Enterprise Linux 7 | sqlite-devel | 0:3.7.17-6.el7_1.1 |
| Red Hat Enterprise Linux 7 | sqlite-devel | 0:3.7.17-6.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | sqlite-doc | 0:3.7.17-6.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | sqlite-doc | 0:3.7.17-6.el7_1.1 |
| Red Hat Enterprise Linux 7 | sqlite-tcl | 0:3.7.17-6.el7_1.1 |
| Red Hat Enterprise Linux 7 | sqlite-tcl | 0:3.7.17-6.ael7b_1.1 |
| SUSE Enterprise Storage 6 | sqlite3 | 3.36.0-3.12.1 |
| SUSE HPE Helion OpenStack 8 | sqlite3 | 3.36.0-9.18.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | sqlite3 | 3.36.0-3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | sqlite3 | 3.36.0-3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | sqlite3 | 3.36.0-3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | sqlite3 | 3.36.0-3.12.1 |
| SUSE Linux Enterprise Micro 5.0 | sqlite3 | 3.36.0-3.12.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 | sqlite3 | 3.36.0-3.12.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | sqlite3 | 3.36.0-3.12.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | sqlite3 | 3.36.0-9.18.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | sqlite3 | 3.36.0-9.18.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | sqlite3 | 3.36.0-9.18.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | sqlite3 | 3.36.0-9.18.1 |
| SUSE Linux Enterprise Server 12 SP5 | sqlite3 | 3.36.0-9.18.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | sqlite3 | 3.36.0-3.12.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | sqlite3 | 3.36.0-3.12.1 |
| SUSE Linux Enterprise Server 15-LTSS | sqlite3 | 3.36.0-3.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | sqlite3 | 3.36.0-9.18.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | sqlite3 | 3.36.0-9.18.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | sqlite3 | 3.36.0-9.18.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | sqlite3 | 3.36.0-3.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | sqlite3 | 3.36.0-3.12.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | sqlite3 | 3.36.0-9.18.1 |
| SUSE Manager Proxy 4.0 | sqlite3 | 3.36.0-3.12.1 |
| SUSE Manager Retail Branch Server 4.0 | sqlite3 | 3.36.0-3.12.1 |
| SUSE Manager Server 4.0 | sqlite3 | 3.36.0-3.12.1 |
| SUSE OpenStack Cloud 8 | sqlite3 | 3.36.0-9.18.1 |
| SUSE OpenStack Cloud 9 | sqlite3 | 3.36.0-9.18.1 |
| SUSE OpenStack Cloud Crowbar 8 | sqlite3 | 3.36.0-9.18.1 |
| SUSE OpenStack Cloud Crowbar 9 | sqlite3 | 3.36.0-9.18.1 |
| Ubuntu 14.04 LTS | sqlite3 | 3.8.2-1ubuntu2.1 |
| openSUSE Leap 15.2 | sqlite3 | 3.36.0-lp152.4.3.1 |
| openSUSE Leap 15.3 | sqlite3 | 3.36.0-3.12.1 |
| openSUSE Tumbleweed | php5 | 5.6.28-1.1 |
| openSUSE Tumbleweed | php7 | 7.0.14-1.4 |
| openSUSE Tumbleweed | php8 | 8.0.11-1.1 |