Total vulnerabilities in the database
The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.
| Software | From | Fixed in |
|---|---|---|
| apple / watchos | 1.0.1 | 1.0.1.x |
| apple / mac_os_x | 10.10.5 | 10.10.5.x |
| debian / debian_linux | 8.0 | 8.0.x |
| canonical / ubuntu_linux | 12.04 | 12.04.x |
| canonical / ubuntu_linux | 14.04 | 14.04.x |
| canonical / ubuntu_linux | 15.04 | 15.04.x |
| sqlite / sqlite | - | 3.8.8.3.x |
| php / php | 5.5.0 | 5.5.26 |
| php / php | 5.6.0 | 5.6.10 |
| php / php | 5.4.0 | 5.4.42 |