CVE-2015-3416
Fixed in a distro release EPSS 5%
The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement.
Products: canonical ubuntu_linux, sqlite, debian_linux, apple mac_os_x, apple watchos, php
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sqlite3 | 3.8.9-1 |
| Debian 13 | sqlite3 | 3.8.9-1 |
| Debian 14 | sqlite3 | 3.8.9-1 |
| Debian 7 | sqlite3 | 3.7.13-1+deb7u2 |
| Debian 8 | sqlite3 | 3.8.7.1-1+deb8u1 |
| Red Hat Enterprise Linux 6 | lemon | 0:3.6.20-1.el6_7.2 |
| Red Hat Enterprise Linux 6 | sqlite | 0:3.6.20-1.el6_7.2 |
| Red Hat Enterprise Linux 6 | sqlite-debuginfo | 0:3.6.20-1.el6_7.2 |
| Red Hat Enterprise Linux 6 | sqlite-devel | 0:3.6.20-1.el6_7.2 |
| Red Hat Enterprise Linux 6 | sqlite-doc | 0:3.6.20-1.el6_7.2 |
| Red Hat Enterprise Linux 6 | sqlite-tcl | 0:3.6.20-1.el6_7.2 |
| Red Hat Enterprise Linux 7 | lemon | 0:3.7.17-6.el7_1.1 |
| Red Hat Enterprise Linux 7 | lemon | 0:3.7.17-6.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | sqlite | 0:3.7.17-6.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | sqlite | 0:3.7.17-6.el7_1.1 |
| Red Hat Enterprise Linux 7 | sqlite-debuginfo | 0:3.7.17-6.el7_1.1 |
| Red Hat Enterprise Linux 7 | sqlite-debuginfo | 0:3.7.17-6.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | sqlite-devel | 0:3.7.17-6.el7_1.1 |
| Red Hat Enterprise Linux 7 | sqlite-devel | 0:3.7.17-6.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | sqlite-doc | 0:3.7.17-6.el7_1.1 |
| Red Hat Enterprise Linux 7 | sqlite-doc | 0:3.7.17-6.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | sqlite-tcl | 0:3.7.17-6.ael7b_1.1 |
| Red Hat Enterprise Linux 7 | sqlite-tcl | 0:3.7.17-6.el7_1.1 |
| Ubuntu 14.04 LTS | sqlite | no fix |
| Ubuntu 14.04 LTS | sqlite3 | 3.8.2-1ubuntu2.1 |
| Ubuntu 16.04 LTS | sqlite | no fix |
| Ubuntu 18.04 LTS | sqlite | no fix |
| Ubuntu 20.04 LTS | sqlite | no fix |
| Ubuntu 22.04 LTS | sqlite | no fix |
| openSUSE Tumbleweed | php5 | 5.6.28-1.1 |
| openSUSE Tumbleweed | php7 | 7.0.14-1.4 |