Skip to content
COOEY

EXPOSURES › CVE-2019-8457

CVE-2019-8457

CRITICAL
DETAIL
SourceNVD · cve Published2019-05-30 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-8457 ↗

▸ RECOMMENDED ACTION  Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED
canonical · vendorfedoraproject · vendoropensuse · vendorsqlite · vendorfedora · productleap · productsqlite · productubuntu linux · product
DESCRIPTION

SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.

SENTIMENT · TRUSTED SOURCES
synthesis neutral +0.00
No security press or authoritative commentary found in the provided sources; only a technical NVD entry and a failed DuckDuckGo bridge query are present, yielding no sentiment toward Canonical.
cooey ↗ neutral +0.00
Neutral; NVD entry states the vulnerability factually without commentary on Canonical's response or impact.
"SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables."
127.0.0.1 ↗ neutral +0.00
Neutral; DuckDuckGo bridge returned an error and provided no content about the vulnerability or Canonical.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.