suse · CVE-2015-3416

Quick triage

Priority: medium Published: 2021-05-30 13:29:58 UTC Updated: 2026-04-18 18:19:34 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2015-3416 severity moderate: SUSE including 649 source package names (apache2-mod_php5, apache2-mod_php5-5.6.28-1.1, …), 1219 product×package rows across 94 product lines (SLES for SAP Applications 11 SP2, SLES for SAP Applications 11 SP3, … (94 product lines)): Known Not Affected 828, Fixed 391.

Description:

The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement.

cvelogic Threat Intelligence