Medium · published June 27, 2020
In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
| Product | Versions | Fixed in |
|---|---|---|
| sqlite/sqlite | < 3.32.3 | 3.32.3 |
| canonical/ubuntu_linux | all versions | — |
| apple/icloud | < 7.21 | 7.21 |
| apple/ipados | < 14.0 | 14.0 |
| apple/iphone_os | < 14.0 | 14.0 |
| apple/macos | < 11.0.1 | 11.0.1 |
| apple/tvos | < 14.0 | 14.0 |
| apple/watchos | < 7.0 | 7.0 |
| oracle/communications_cloud_native_core_policy | all versions | — |
| oracle/communications_messaging_server | all versions | — |
| oracle/communications_network_charging_and_control | all versions | — |
| oracle/communications_network_charging_and_control | all versions | — |
| oracle/enterprise_manager_ops_center | all versions | — |
| oracle/hyperion_infrastructure_technology | all versions | — |
| oracle/mysql | ≤ 8.0.22 | — |
| oracle/outside_in_technology | all versions | — |
| oracle/outside_in_technology | all versions | — |
| siemens/sinec_infrastructure_network_services | < 1.0.1.1 | 1.0.1.1 |