Back to search
CVE-2017-10989
Published: Jul 7, 2017
Modified: Aug 5, 2024
PUBLISHED
Description
The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
x_refsource_CONFIRM
https://support.apple.com/HT208144
x_refsource_CONFIRM
[debian-lts-announce] 20190111 [SECURITY] [DLA 1633-1] sqlite3 security update
mailing-list
x_refsource_MLIST
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2405
x_refsource_MISC
https://sqlite.org/src/info/66de6f4a
x_refsource_MISC
1039427
vdb-entry
x_refsource_SECTRACK
https://bugs.launchpad.net/ubuntu/+source/sqlite3/+bug/1700937
x_refsource_MISC
https://support.apple.com/HT208113
x_refsource_CONFIRM
https://support.apple.com/HT208112
x_refsource_CONFIRM
http://marc.info/?l=sqlite-users&m=149933696214713&w=2
x_refsource_MISC
https://support.apple.com/HT208115
x_refsource_CONFIRM
99502
vdb-entry
x_refsource_BID
openSUSE-SU-2019:1426
vendor-advisory
x_refsource_SUSE
USN-4019-1
vendor-advisory
x_refsource_UBUNTU
USN-4019-2
vendor-advisory
x_refsource_UBUNTU
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now