CVE-2015-3414 - CVE House
Back to Database
Status published High CVE-2015-3414

SQLite before 3.8.9 does not properly implement the dequoting of...

Vulnerability Description

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-3414

Credits & Attribution

No credits recorded in the NVD database.

References

More from sqlite

View All →
CVE-2022-46908
SQLite through 3.40.0, when relying on --safe for execution of...
Unknown 0
CVE-2022-35737
SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds...
Unknown 0
CVE-2021-45346
A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1...
Medium 4.3
CVE-2021-36690
A segmentation fault can occur in the sqlite3.exe command-line component...
High 7.5
CVE-2021-31239
An issue found in SQLite SQLite3 v.3.35.4 that allows a...
Unknown 0

Affected Vendor

Affected Software

sqlite, mac os x, watchos, debian linux, ubuntu linux, php
Vulnerable Versions:
0, 10.10.5, 1.0.1, 8.0, 12.04, 14.04, 15.04, 5.4.0, 5.5.0, 5.6.0

Timeline

Official Publish: April 24th, 2015
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.