CVE-2017-15286

HIGH 7.5CVE-2017-15286 · Published 12/10/2017 · updated 17/06/2026

In short

CVE-2017-15286 is a HIGH (CVSS 7.5) vulnerability affecting sqlite (sqlite).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 87.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sqlite sqlite	`= 3.20.1`	No fix yet

Description

SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.

References

securityfocus.com/bid/101285 · Third Party Advisory
Ha0Team/crash-of-sqlite3 · Exploit

More vulnerabilities in sqlite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

sqlite

= 3.20.1

No fix yet

More vulnerabilities in sqlite

See all →