CVEs-PoC/2019/CVE-2019-8457.md

CVE-2019-8457

Description

SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.

POC

Reference

• https://kc.mcafee.com/corporate/index?page=content&id=SB10365
• https://www.oracle.com/security-alerts/cpuapr2020.html
• https://www.oracle.com/security-alerts/cpujan2020.html
• https://www.oracle.com/security-alerts/cpujul2020.html
• https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Github

• https://github.com/1g-v/DevSec_Docker_lab
• https://github.com/ARPSyndicate/cvemon
• https://github.com/L-ivan7/-.-DevSec_Docker
• https://github.com/PajakAlexandre/wik-dps-tp02
• https://github.com/cdupuis/image-api
• https://github.com/colonelmeow/appsecctf
• https://github.com/fokypoky/places-list
• https://github.com/fredrkl/trivy-demo
• https://github.com/frida963/ThousandEyesChallenge
• https://github.com/jrak1204/overstock_test