Total vulnerabilities in the database
SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.
Software | From | Fixed in |
---|---|---|
sqlite / sqlite | - | 3.8.8.3.x |
apple / watchos | 1.0.1 | 1.0.1.x |
apple / mac_os_x | 10.10.5 | 10.10.5.x |
debian / debian_linux | 8.0 | 8.0.x |
canonical / ubuntu_linux | 12.04 | 12.04.x |
canonical / ubuntu_linux | 14.04 | 14.04.x |
canonical / ubuntu_linux | 15.04 | 15.04.x |
php / php | 5.5.0 | 5.5.26 |
php / php | 5.6.0 | 5.6.10 |
php / php | 5.4.0 | 5.4.42 |