CVE-2015-3414

Name of the Vulnerable Software and Affected Versions SQLite versions prior to 3.8.9

Description The issue is related to the improper implementation of the dequoting of collation-sequence names. This can be exploited by context-dependent attackers to cause a denial of service, resulting in uninitialized memory access and application crash, via a crafted COLLATE clause. For example, using COLLATE"""""""" at the end of a SELECT statement can trigger this issue.

Recommendations For SQLite versions prior to 3.8.9, update to version 3.8.9 or later to resolve the issue. At the moment, there is no other information about additional mitigation measures for this vulnerability.