CVE-2015-3414

Source
https://nvd.nist.gov/vuln/detail/CVE-2015-3414
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2015-3414.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2015-3414
Downstream
Related
Published
2015-04-24T17:59:00Z
Modified
2025-08-09T20:01:27Z
Summary
[none]
Details

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.

References

Affected packages