MGASA-2017-0238

Advisory lineage Upstream: 2 Downstream: 0
Published: 03 Aug 2017, 19:05
Last modified:16 Apr 2026, 06:25

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

03 Aug 2017, 19:05
Published
Vulnerability first disclosed
16 Apr 2026, 06:25
Last Modified
Vulnerability information updated

Description

Updated sqlite3 packages fix security vulnerability Pointer disclosure in SQLite (CVE-2017-7000). The getNodeSize function in ext/rtree/rtree.c in SQLite mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact (CVE-2017-10989). Note: the CVE-2017-10989 issue only affected Mageia 5.

Affected Systems

  • mageia•sqlite3

    < 3.10.2-1.1.mga5

  • mageia•sqlite3

    < 3.17.0-2.1.mga6

References (4)