CVE-2013-7443

Published: Aug 12, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service (crash) via crafted SQL statements.

Affected (4)

Products: Canonical: Ubuntu Linux · Sqlite: Sqlite

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.04

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Sqlite Sqlite	Version 3.8.2

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (14)

http://ubuntu.com/usn/usn-2698-1

Source: security@ubuntu.com

http://www.openwall.com/lists/oss-security/2015/07/14/5

Source: security@ubuntu.com

http://www.openwall.com/lists/oss-security/2015/07/15/4

Source: security@ubuntu.com

http://www.securityfocus.com/bid/76089

Source: security@ubuntu.com

https://bugs.launchpad.net/ubuntu/+source/sqlite3/+bug/1448758

Source: security@ubuntu.com

https://www.sqlite.org/src/info/520070ec7fbaac73eda0e0123596b7bb3e9a6897

Source: security@ubuntu.com

ExploitVendor Advisory

https://www.sqlite.org/src/info/ac5852d6403c9c9628ca0aa7be135c702f000698

Source: security@ubuntu.com

Exploit

http://ubuntu.com/usn/usn-2698-1