| Package | Affected versions | Patched versions |
|---|---|---|
| php | ≥ 5.4.0, < 5.4.42≥ 5.5.0, < 5.5.26≥ 5.6.0, < 5.6.10 | 5.4.425.5.265.6.10 |
| sqlite | ≤ 3.8.8.3 |
The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free