CVE-2015-3416 The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause...
HighCVSS 7.5
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/sqlite(Ubuntu:22.04) | All versions | No fix listed |
| debian/sqlite3(Debian:12) | < 3.8.9-1 | 3.8.9-1 |
| debian/sqlite3(Debian:13) | < 3.8.9-1 | 3.8.9-1 |
| debian/sqlite3(Debian:14) | < 3.8.9-1 | 3.8.9-1 |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
| SQLite | <= 3.8.8.3 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| apple mac os x | <= 10.6.8 | No fix listed |
| apple watchOS | <= 1.0.1 | No fix listed |
| PHP | >= 5.4.0, < 5.4.42 | 5.4.42 |
| PHP | >= 5.5.0, < 5.5.26 | 5.5.26 |
| PHP | >= 5.6.0, < 5.6.10 | 5.6.10 |
References
- Ubuntu CVE tracker vendor-advisory
- USN-2698-1 vendor-advisory
- www.cve.org
- PHP 5.4.42 Released vendor-advisory
- Debian Security Tracker CVE-2015-3416 vendor-advisory
- APPLE-SA-2015-09-21-1 mailing-list third-party-advisory vendor-advisory
- APPLE-SA-2015-09-30-3 mailing-list third-party-advisory vendor-advisory
- RHSA-2015:1634 third-party-advisory vendor-advisory
- RHSA-2015:1635 third-party-advisory vendor-advisory
- 20150414 several issues in SQLite (+ catching up on several other bugs) mailing-list third-party-advisory vdb-entry
- DSA-3252 third-party-advisory vendor-advisory
- MDVSA-2015:217 third-party-advisory vendor-advisory
- www.oracle.com patch third-party-advisory
- www.oracle.com third-party-advisory
- 74228 third-party-advisory vdb-entry
- 1033703 third-party-advisory vdb-entry
- www.sqlite.org vendor-advisory
- USN-2698-1 third-party-advisory vendor-advisory
- GLSA-201507-05 third-party-advisory vendor-advisory
- support.apple.com third-party-advisory
- support.apple.com third-party-advisory
- bugs.debian.org issue-tracking