Total vulnerabilities in the database
The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement.
| Software | From | Fixed in |
|---|---|---|
| canonical / ubuntu_linux | 12.04 | 12.04.x |
| canonical / ubuntu_linux | 14.04 | 14.04.x |
| canonical / ubuntu_linux | 15.04 | 15.04.x |
| sqlite / sqlite | - | 3.8.8.3.x |
| debian / debian_linux | 8.0 | 8.0.x |
| apple / mac_os_x | - | 10.6.8.x |
| apple / watchos | - | 1.0.1.x |
| php / php | 5.5.0 | 5.5.26 |
| php / php | 5.6.0 | 5.6.10 |
| php / php | 5.4.0 | 5.4.42 |