CVE-2015-3415

EPSS 7.9%
發布日:2015/4/24修改日:2026/4/28

描述

The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.

受影響套件(1)

參考連結(1)