Wind River Support Network


LIN6-13195 : Security Advisory - sqlite - CVE-2017-10989

Created: Jul 12, 2017    Updated: Nov 17, 2020
Resolved Date: Aug 21, 2017
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact.

Other Downloads

Live chat