Home

CVE-2015-3416

Description

The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement.

Risk Information

Base Score
6.3
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
EPSS Score
Exploitation Probability
7.527

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.6 UpdateMac
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.6 Combo UpdateMac
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.5 UpdateMac
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.5 Combo UpdateMac
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.4 UpdateMac
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.4 Combo UpdateMac
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.3 UpdateMac
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.2 UpdateMac
Multiple vulnerabilities are fixed in OS X El Capitan 10.11.1 UpdateMac
C library that implements an SQL database engine (USN-2698-1) libsqlite3-0_3.7.9-2ubuntu1.2_i386.debLinux
C library that implements an SQL database engine (USN-2698-1) libsqlite3-0_3.7.9-2ubuntu1.2_amd64.debLinux
C library that implements an SQL database engine (USN-2698-1) libsqlite3-0_3.8.7.4-1ubuntu0.1_i386.debLinux
C library that implements an SQL database engine (USN-2698-1) libsqlite3-0_3.8.7.4-1ubuntu0.1_amd64.debLinux
sqlite3 security update(DSA-3252-2) sqlite3_3.7.13-1+deb7u2_i386.debLinux
Sqlite security update (CESA-2015:1634) lemon-3.6.20-1.el6_7.2.i686.rpmLinux
Sqlite security update (CESA-2015:1634) lemon-3.6.20-1.el6_7.2.x86_64.rpmLinux
Sqlite security update (CESA-2015:1634) sqlite-3.6.20-1.el6_7.2.i686.rpmLinux
Sqlite security update (CESA-2015:1634) sqlite-3.6.20-1.el6_7.2.x86_64.rpmLinux
Sqlite security update (CESA-2015:1634) sqlite-doc-3.6.20-1.el6_7.2.i686.rpmLinux
Sqlite security update (CESA-2015:1634) sqlite-doc-3.6.20-1.el6_7.2.x86_64.rpmLinux
Sqlite security update (CESA-2015:1634) sqlite-tcl-3.6.20-1.el6_7.2.i686.rpmLinux
Sqlite security update (CESA-2015:1634) sqlite-tcl-3.6.20-1.el6_7.2.x86_64.rpmLinux
Sqlite security update (CESA-2015:1634) sqlite-devel-3.6.20-1.el6_7.2.i686.rpmLinux
Sqlite security update (CESA-2015:1634) sqlite-devel-3.6.20-1.el6_7.2.x86_64.rpmLinux
(RHSA-2015:1634) Moderate: sqlite security update lemon-3.6.20-1.el6_7.2.i686.rpmLinux
(RHSA-2015:1634) Moderate: sqlite security update lemon-3.6.20-1.el6_7.2.x86_64.rpmLinux
(RHSA-2015:1634) Moderate: sqlite security update sqlite-3.6.20-1.el6_7.2.i686.rpmLinux
(RHSA-2015:1634) Moderate: sqlite security update sqlite-3.6.20-1.el6_7.2.x86_64.rpmLinux
(RHSA-2015:1634) Moderate: sqlite security update sqlite-devel-3.6.20-1.el6_7.2.i686.rpmLinux
(RHSA-2015:1634) Moderate: sqlite security update sqlite-devel-3.6.20-1.el6_7.2.x86_64.rpmLinux
(RHSA-2015:1634) Moderate: sqlite security update sqlite-doc-3.6.20-1.el6_7.2.i686.rpmLinux
(RHSA-2015:1634) Moderate: sqlite security update sqlite-doc-3.6.20-1.el6_7.2.x86_64.rpmLinux
(RHSA-2015:1634) Moderate: sqlite security update sqlite-tcl-3.6.20-1.el6_7.2.i686.rpmLinux
(RHSA-2015:1634) Moderate: sqlite security update sqlite-tcl-3.6.20-1.el6_7.2.x86_64.rpmLinux
(RHSA-2015:1635) Moderate: sqlite security update lemon-3.7.17-6.el7_1.1.x86_64.rpmLinux
(RHSA-2015:1635) Moderate: sqlite security update sqlite-3.7.17-6.el7_1.1.i686.rpmLinux
(RHSA-2015:1635) Moderate: sqlite security update sqlite-3.7.17-6.el7_1.1.x86_64.rpmLinux
(RHSA-2015:1635) Moderate: sqlite security update sqlite-devel-3.7.17-6.el7_1.1.i686.rpmLinux
(RHSA-2015:1635) Moderate: sqlite security update sqlite-devel-3.7.17-6.el7_1.1.x86_64.rpmLinux
(RHSA-2015:1635) Moderate: sqlite security update sqlite-tcl-3.7.17-6.el7_1.1.x86_64.rpmLinux
Lemon update (ELSA-2015-1634) lemon-3.6.20-1.el6_7.2.x86_64.rpmLinux
Sqlite update (ELSA-2015-1634) sqlite-3.6.20-1.el6_7.2.x86_64.rpmLinux
Sqlite-devel update (ELSA-2015-1634) sqlite-devel-3.6.20-1.el6_7.2.x86_64.rpmLinux
Sqlite-doc update (ELSA-2015-1634) sqlite-doc-3.6.20-1.el6_7.2.x86_64.rpmLinux
Sqlite-tcl update (ELSA-2015-1634) sqlite-tcl-3.6.20-1.el6_7.2.x86_64.rpmLinux
Lemon update (ELSA-2015-1634) lemon-3.6.20-1.el6_7.2.i686.rpmLinux
Sqlite update (ELSA-2015-1634) sqlite-3.6.20-1.el6_7.2.i686.rpmLinux
Sqlite-devel update (ELSA-2015-1634) sqlite-devel-3.6.20-1.el6_7.2.i686.rpmLinux
Sqlite-doc update (ELSA-2015-1634) sqlite-doc-3.6.20-1.el6_7.2.i686.rpmLinux
Sqlite-tcl update (ELSA-2015-1634) sqlite-tcl-3.6.20-1.el6_7.2.i686.rpmLinux
Integer Overflow or Wraparound Vulnerability (CVE-2015-3416)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-600753OS X El Capitan 10.11.6 Update
PATCH-600754OS X El Capitan 10.11.6 Combo Update
PATCH-600753OS X El Capitan 10.11.6 Update
PATCH-600754OS X El Capitan 10.11.6 Combo Update
PATCH-600753OS X El Capitan 10.11.6 Update
PATCH-600754OS X El Capitan 10.11.6 Combo Update
PATCH-600753OS X El Capitan 10.11.6 Update
PATCH-600753OS X El Capitan 10.11.6 Update
PATCH-600753OS X El Capitan 10.11.6 Update

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234