CVE-2015-3415

The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to…

published April 24, 2015

CVSS
—
EPSS
4%
Percentile
90.8
In the wild
Unconfirmed
What it is

The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04140 · 90.8th percentile
Published
2015-04-24T17:00Z
EPSS history
Timeline
  • 24 APR 17:00Z
    The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to…
    cvelistv5