CVE:CVE-2015-3415
CNNVD:CNNVD-201504-505
SQLite是美国D.Richard Hipp软件开发者的一套基于C语言的开源嵌入式关系数据库管理系统。该系统具有独立性、隔离性、跨平台等特点。
SQLite 3.8.9之前版本的vdbe.c文件中的‘sqlite3VdbeExec’函数存在输入验证错误漏洞，该漏洞源于程序没有正确实现比较运算符。攻击者可借助特制的CHECK子句利用该漏洞造成拒绝服务（无效的释放操作）。
solution:Upgrade apple mac_os_x to a higher version than 10.10.5,and avoid the version 10.10.5; Upgrade apple watchos to a higher version than 1.0.1,and avoid the version 1.0.1; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,and avoid the version 12.04,14.04,15.04; Upgrade sqlite sqlite to a higher version than 3.8.8.3,and avoid the version (,3.8.8.3]; Upgrade php php to a higher version than 5.4.42,5.5.26,5.6.10,and avoid the version [5.4.0,5.4.42),[5.5.0,5.5.26),[5.6.0,5.6.10)