CVE-2021-36690
High
Description
A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally allowed to execute commands). This report does NOT imply any problem in the SQLite library.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Sqlite
PublishedAug 24, 2021
First seenAug 24, 2021
How to fix
Update
- apple iphone_os16.0 or later
- apple macos13.0 or later
- apple tvos16.0 or later
- apple watchos9.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sqlite sqlite | 3.36.0 | — |
| oracle zfs_storage_appliance_kit | 8.8 | — |
| apple iphone_os | v < 16.0 | 16.0 |
| apple macos | v < 13.0 | 13.0 |
| apple tvos | v < 16.0 | 16.0 |
| apple watchos | v < 9.0 | 9.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.