kritik
CVE-2019-8457
sqlite: heap out-of-bound read in function rtreenode()
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Azure Linux, Photon OS. Daha düşük diyenler: Red Hat (orta), Oracle (orta), Ubuntu (orta).
Açıklama
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Azure Linux 3.0 | ceph | 0:18.2.1-1.azl3 |
| Photon OS 1.0 | sqlite-autoconf | 3.27.2-3.ph1 |
| Photon OS 2.0 | sqlite | 3.27.2-3.ph2 |
| Photon OS 3.0 | sqlite | 3.27.2-3.ph3 |
| alpine 3.10 | sqlite | 3.28.0-r0 |
| alpine 3.11 | sqlite | 3.28.0-r0 |
| alpine 3.12 | sqlite | 3.28.0-r0 |
| alpine 3.13 | sqlite | 3.28.0-r0 |
| alpine 3.14 | sqlite | 3.28.0-r0 |
| alpine 3.15 | sqlite | 3.28.0-r0 |
| alpine 3.16 | sqlite | 3.28.0-r0 |
| alpine 3.17 | sqlite | 3.28.0-r0 |
67 kaynaktaki 116 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Azure Linux 3.0 | ceph | 0:18.2.1-1.azl3 |
| Photon OS 1.0 | sqlite-autoconf | 3.27.2-3.ph1 |
| Photon OS 2.0 | sqlite | 3.27.2-3.ph2 |
| Photon OS 3.0 | sqlite | 3.27.2-3.ph3 |
| alpine 3.10 | sqlite | 3.28.0-r0 |
| alpine 3.11 | sqlite | 3.28.0-r0 |
| alpine 3.12 | sqlite | 3.28.0-r0 |
| alpine 3.13 | sqlite | 3.28.0-r0 |
| alpine 3.14 | sqlite | 3.28.0-r0 |
| alpine 3.15 | sqlite | 3.28.0-r0 |
| alpine 3.16 | sqlite | 3.28.0-r0 |
| alpine 3.17 | sqlite | 3.28.0-r0 |
| alpine 3.18 | sqlite | 3.28.0-r0 |
| alpine 3.19 | sqlite | 3.28.0-r0 |
| alpine 3.20 | sqlite | 3.28.0-r0 |
| alpine 3.21 | sqlite | 3.28.0-r0 |
| alpine 3.22 | sqlite | 3.28.0-r0 |
| alpine 3.23 | sqlite | 3.28.0-r0 |
| alpine 3.24 | sqlite | 3.28.0-r0 |
| alpine 3.7 | sqlite | 3.25.3-r1 |
| alpine 3.8 | sqlite | 3.25.3-r1 |
| alpine 3.9 | sqlite | 3.28.0-r0 |
| alpine edge | sqlite | 3.28.0-r0 |
| debian 10 | db5.3 | düzeltme belirtilmemiş |
| debian 11 | db5.3 | düzeltme belirtilmemiş |
| debian 11 | sqlite3 | 3.27.2-3 |
| debian 12 | db5.3 | 5.3.28+dfsg1-0.9 |
| debian 12 | sqlite3 | 3.27.2-3 |
| debian 13 | db5.3 | 5.3.28+dfsg1-0.9 |
| debian 13 | sqlite3 | 3.27.2-3 |
| debian 14 | db5.3 | 5.3.28+dfsg1-0.9 |
| debian 14 | sqlite3 | 3.27.2-3 |
| debian 8 | sqlite3 | düzeltme belirtilmemiş |
| debian 9 | db5.3 | düzeltme belirtilmemiş |
| debian 9 | sqlite3 | düzeltme belirtilmemiş |
| echo | db5.3 | 5.3.28+dfsg1-0.9 |
| echo | sqlite3 | 3.27.2-3 |
| Oracle Linux 8 | lemon | 3.26.0-6.el8 |
| Oracle Linux 8 | sqlite | 3.26.0-6.el8 |
| Oracle Linux 8 | sqlite-devel | 3.26.0-6.el8 |
| Oracle Linux 8 | sqlite-doc | 3.26.0-6.el8 |
| Oracle Linux 8 | sqlite-libs | 3.26.0-6.el8 |
| rapidfort ubuntu 20.04 | sqlcipher | düzeltme belirtilmemiş |
| rapidfort ubuntu 22.04 | sqlcipher | düzeltme belirtilmemiş |
| rapidfort ubuntu 24.04 | sqlcipher | düzeltme belirtilmemiş |
| Red Hat | lemon | düzeltme belirtilmemiş |
| Red Hat | sqlite | düzeltme belirtilmemiş |
| Red Hat | sqlite-devel | düzeltme belirtilmemiş |
| Red Hat | sqlite-doc | düzeltme belirtilmemiş |
| Red Hat | sqlite-tcl | düzeltme belirtilmemiş |
| root.io alpine 3.18 | rootio-sqlite | 3.28.0-r0 |
| root.io debian 11 | db5.3 | 5.3.28+dfsg1-0.8.root.io.1, 5.3.28+dfsg1-0.8.root.io.2, 5.3.28+dfsg1-0.8.root.io.3, 5.3.28+dfsg1-0.8.root.io.4, 5.3.28+dfsg1-0.8.root.io.5 |
| root.io debian 11 | rootio-db5.3 | 5.3.28+dfsg1-0.8.root.io.1, 5.3.28+dfsg1-0.8.root.io.2, 5.3.28+dfsg1-0.8.root.io.3, 5.3.28+dfsg1-0.8.root.io.4, 5.3.28+dfsg1-0.8.root.io.5 |
| root.io debian 11 | rootio-sqlite3 | 3.27.2-3 |
| root.io debian 12 | rootio-sqlite3 | 3.27.2-3 |
| root.io debian 13 | rootio-sqlite3 | 3.27.2-3 |
| seal alpine | seal-sqlite | 3.15.2-r05341999 |
| seal alpine | sqlite | 3.15.2-r05341999 |
| seal Red Hat 7 | seal-sqlite | 3.7.17-8.el7_7.1+sp999 |
| seal Red Hat 7 | sqlite | 3.7.17-8.el7_7.1+sp999 |
| seal Red Hat 8 | seal-sqlite | 3.26.0-19.el8_9+sp999 |
| seal Red Hat 8 | sqlite | 3.26.0-19.el8_9+sp999 |
| seal Red Hat 9 | seal-sqlite | 3.34.1-7.el9_3+sp999 |
| seal Red Hat 9 | sqlite | 3.34.1-7.el9_3+sp999 |
| ubuntu 14.04-ESM | db5.3 | 5.3.28-3ubuntu3.1+esm1 |
| ubuntu 14.04-ESM | sqlite3 | 3.8.2-1ubuntu2.2+esm1 |
| ubuntu 16.04 | db5.3 | 5.3.28-11ubuntu0.2 |
| ubuntu 16.04 | sqlite3 | 3.11.0-1ubuntu1.2 |
| ubuntu 16.04-ESM | db5.3 | 5.3.28-11ubuntu0.2 |
| ubuntu 16.04-ESM | sqlite3 | 3.11.0-1ubuntu1.2 |
| ubuntu 18.04 | db5.3 | 5.3.28-13.1ubuntu1.1 |
| ubuntu 18.04 | sqlite3 | 3.22.0-1ubuntu0.1 |
| ubuntu 18.04-ESM | db5.3 | 5.3.28-13.1ubuntu1.1 |
| ubuntu 18.04-ESM | sqlcipher | düzeltme belirtilmemiş |
| ubuntu 18.04-ESM | sqlite3 | 3.22.0-1ubuntu0.1 |
| ubuntu 18.10 | db5.3 | 5.3.28+dfsg1-0.1ubuntu0.1 |
| ubuntu 18.10 | sqlite3 | 3.24.0-1ubuntu0.1 |
| ubuntu 19.04 | db5.3 | 5.3.28+dfsg1-0.5ubuntu0.1 |
| ubuntu 19.04 | sqlite3 | 3.27.2-2ubuntu0.1 |
| ubuntu 19.10 | db5.3 | 5.3.28+dfsg1-0.6ubuntu1 |
| ubuntu 19.10 | sqlite3 | 3.27.2-3 |
| ubuntu 20.04 | db5.3 | 5.3.28+dfsg1-0.6ubuntu1 |
| ubuntu 20.04 | sqlite3 | 3.27.2-3 |
| ubuntu 20.04-ESM | db5.3 | 5.3.28+dfsg1-0.6ubuntu1 |
| ubuntu 20.04-ESM | sqlcipher | düzeltme belirtilmemiş |
| ubuntu 20.04-ESM | sqlite3 | 3.27.2-3 |
| ubuntu 20.10 | db5.3 | 5.3.28+dfsg1-0.6ubuntu1 |
| ubuntu 20.10 | sqlite3 | 3.27.2-3 |
| ubuntu 21.04 | db5.3 | 5.3.28+dfsg1-0.6ubuntu1 |
| ubuntu 21.04 | sqlite3 | 3.27.2-3 |
| ubuntu 21.10 | db5.3 | 5.3.28+dfsg1-0.6ubuntu1 |
| ubuntu 21.10 | sqlite3 | 3.27.2-3 |
| ubuntu 22.04 | db5.3 | 5.3.28+dfsg1-0.6ubuntu1 |
| ubuntu 22.04 | sqlcipher | düzeltme belirtilmemiş |
| ubuntu 22.04 | sqlite3 | 3.27.2-3 |
| ubuntu 22.10 | db5.3 | 5.3.28+dfsg1-0.6ubuntu1 |
| ubuntu 22.10 | sqlite3 | 3.27.2-3 |
| ubuntu 23.04 | db5.3 | 5.3.28+dfsg1-0.6ubuntu1 |
| ubuntu 23.04 | sqlite3 | 3.27.2-3 |
| ubuntu 23.10 | db5.3 | 5.3.28+dfsg1-0.6ubuntu1 |
| ubuntu 23.10 | sqlite3 | 3.27.2-3 |
| ubuntu 24.04 | db5.3 | 5.3.28+dfsg1-0.6ubuntu1 |
| ubuntu 24.04 | sqlcipher | düzeltme belirtilmemiş |
| ubuntu 24.04 | sqlite3 | 3.27.2-3 |
| ubuntu 24.10 | db5.3 | 5.3.28+dfsg1-0.6ubuntu1 |
| ubuntu 24.10 | sqlite3 | 3.27.2-3 |
| ubuntu 25.04 | db5.3 | 5.3.28+dfsg1-0.6ubuntu1 |
| ubuntu 25.04 | sqlite3 | 3.27.2-3 |
| ubuntu 25.10 | db5.3 | 5.3.28+dfsg1-0.6ubuntu1 |
| ubuntu 25.10 | sqlite3 | 3.27.2-3 |
| ubuntu 26.04 | db5.3 | 5.3.28+dfsg1-0.6ubuntu1 |
| ubuntu 26.04 | sqlcipher | düzeltme belirtilmemiş |
| ubuntu 26.04 | sqlite3 | 3.27.2-3 |
| ubuntu 26.10 | db5.3 | 5.3.28+dfsg1-0.6ubuntu1 |
| ubuntu 26.10 | sqlcipher | düzeltme belirtilmemiş |
| ubuntu 26.10 | sqlite3 | 3.27.2-3 |
Referanslar
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00074.html
- https://access.redhat.com/security/cve/CVE-2019-8457
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://kc.mcafee.com/corporate/index?page=content&id=SB10365
- https://linux.oracle.com/cve/CVE-2019-8457.html
- https://linux.oracle.com/errata/ELSA-2020-1810.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OPKYSWCOM3CL66RI76TYVIG6TJ263RXH/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SJPFGA45DI4F5MCF2OAACGH3HQOF4G3M/
25 referansın hepsi
- https://nvd.nist.gov/vuln/detail/CVE-2019-8457
- https://security.netapp.com/advisory/ntap-20190606-0002/
- https://ubuntu.com/security/notices/USN-4004-1
- https://ubuntu.com/security/notices/USN-4004-2
- https://ubuntu.com/security/notices/USN-4019-1
- https://ubuntu.com/security/notices/USN-4019-2
- https://usn.ubuntu.com/4004-1/
- https://usn.ubuntu.com/4004-2/
- https://usn.ubuntu.com/4019-1/
- https://usn.ubuntu.com/4019-2/
- https://www.cve.org/CVERecord?id=CVE-2019-8457
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
- https://www.sqlite.org/releaselog/3_28_0.html
- https://www.sqlite.org/src/info/90acdbfce9c08858