CVE-2017-2518
An issue was discovered in certain Apple products. iOS before 10.3.2 i ...
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Ubuntu (baja).
Descripción
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted SQL statement.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| debian 11 | sqlite3 | 3.15.2-1 |
| debian 12 | sqlite3 | 3.15.2-1 |
| debian 13 | sqlite3 | 3.15.2-1 |
| debian 14 | sqlite3 | 3.15.2-1 |
| debian 7 | sqlite3 | sin corrección indicada |
| debian 8 | sqlite3 | 3.8.7.1-1+deb8u4 |
| echo | sqlite3 | 3.15.2-1 |
| root.io debian 11 | rootio-sqlite3 | 3.15.2-1 |
| root.io debian 12 | rootio-sqlite3 | 3.15.2-1 |
| root.io debian 13 | rootio-sqlite3 | 3.15.2-1 |
| ubuntu 14.04-ESM | sqlite3 | 3.8.2-1ubuntu2.2+esm1 |
| ubuntu 16.04 | sqlite3 | 3.11.0-1ubuntu1.2 |
Mostrar las 13 entradas de 13 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| debian 11 | sqlite3 | 3.15.2-1 |
| debian 12 | sqlite3 | 3.15.2-1 |
| debian 13 | sqlite3 | 3.15.2-1 |
| debian 14 | sqlite3 | 3.15.2-1 |
| debian 7 | sqlite3 | sin corrección indicada |
| debian 8 | sqlite3 | 3.8.7.1-1+deb8u4 |
| echo | sqlite3 | 3.15.2-1 |
| root.io debian 11 | rootio-sqlite3 | 3.15.2-1 |
| root.io debian 12 | rootio-sqlite3 | 3.15.2-1 |
| root.io debian 13 | rootio-sqlite3 | 3.15.2-1 |
| ubuntu 14.04-ESM | sqlite3 | 3.8.2-1ubuntu2.2+esm1 |
| ubuntu 16.04 | sqlite3 | 3.11.0-1ubuntu1.2 |
| ubuntu 16.04-ESM | sqlite3 | 3.11.0-1ubuntu1.2 |
Referencias
- http://www.securityfocus.com/bid/98468
- http://www.securitytracker.com/id/1038484
- https://clusterfuzz-external.appspot.com/testcase?key=4603622180519936
- https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html
- https://support.apple.com/HT207797
- https://support.apple.com/HT207798
- https://support.apple.com/HT207800
- https://support.apple.com/HT207801