CVE-2015-3415
Description
The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.
Risk Information
Base Score
6.3
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
EPSS Score
Exploitation Probability
5.653
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple vulnerabilities are fixed in OS X El Capitan 10.11.6 Update | Mac |
| Multiple vulnerabilities are fixed in OS X El Capitan 10.11.6 Combo Update | Mac |
| Multiple vulnerabilities are fixed in OS X El Capitan 10.11.5 Update | Mac |
| Multiple vulnerabilities are fixed in OS X El Capitan 10.11.5 Combo Update | Mac |
| Multiple vulnerabilities are fixed in OS X El Capitan 10.11.4 Update | Mac |
| Multiple vulnerabilities are fixed in OS X El Capitan 10.11.4 Combo Update | Mac |
| Multiple vulnerabilities are fixed in OS X El Capitan 10.11.3 Update | Mac |
| Multiple vulnerabilities are fixed in OS X El Capitan 10.11.2 Update | Mac |
| Multiple vulnerabilities are fixed in OS X El Capitan 10.11.1 Update | Mac |
| C library that implements an SQL database engine (USN-2698-1) libsqlite3-0_3.7.9-2ubuntu1.2_i386.deb | Linux |
| C library that implements an SQL database engine (USN-2698-1) libsqlite3-0_3.7.9-2ubuntu1.2_amd64.deb | Linux |
| C library that implements an SQL database engine (USN-2698-1) libsqlite3-0_3.8.7.4-1ubuntu0.1_i386.deb | Linux |
| C library that implements an SQL database engine (USN-2698-1) libsqlite3-0_3.8.7.4-1ubuntu0.1_amd64.deb | Linux |
| (RHSA-2015:1635) Moderate: sqlite security update lemon-3.7.17-6.el7_1.1.x86_64.rpm | Linux |
| (RHSA-2015:1635) Moderate: sqlite security update sqlite-3.7.17-6.el7_1.1.i686.rpm | Linux |
| (RHSA-2015:1635) Moderate: sqlite security update sqlite-3.7.17-6.el7_1.1.x86_64.rpm | Linux |
| (RHSA-2015:1635) Moderate: sqlite security update sqlite-devel-3.7.17-6.el7_1.1.i686.rpm | Linux |
| (RHSA-2015:1635) Moderate: sqlite security update sqlite-devel-3.7.17-6.el7_1.1.x86_64.rpm | Linux |
| (RHSA-2015:1635) Moderate: sqlite security update sqlite-tcl-3.7.17-6.el7_1.1.x86_64.rpm | Linux |
| Improper Resource Shutdown or Release Vulnerability (CVE-2015-3415) | NCM |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-600753 | OS X El Capitan 10.11.6 Update |
| PATCH-600754 | OS X El Capitan 10.11.6 Combo Update |
| PATCH-600753 | OS X El Capitan 10.11.6 Update |
| PATCH-600754 | OS X El Capitan 10.11.6 Combo Update |
| PATCH-600753 | OS X El Capitan 10.11.6 Update |
| PATCH-600754 | OS X El Capitan 10.11.6 Combo Update |
| PATCH-600753 | OS X El Capitan 10.11.6 Update |
| PATCH-600753 | OS X El Capitan 10.11.6 Update |
| PATCH-600753 | OS X El Capitan 10.11.6 Update |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234