Out-of-bounds Read

Affecting sqlite3 package, versions <3.8.7.1-1+deb8u4

Overview

The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact.

References

• Apple Security Advisory
• Apple Security Advisory
• Apple Security Advisory
• Apple Security Advisory
• CVE Details
• Debian Security Announcement
• Debian Security Tracker
• HP Security Bulletin
• MISC
• MISC
• MISC
• MISC
• OpenSuse Security Announcement
• Oracle Security Advisory
• Security Focus
• Security Tracker
• Ubuntu CVE Tracker
• Ubuntu Security Advisory
• Ubuntu Security Advisory