CVE-2015-7036

Publication date 22 November 2015

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a SQL command that triggers an API call with a crafted pointer value in the second argument.

Read the notes from the security team

Status

Package Ubuntu Release Status
sqlite 15.10 wily
Not affected
15.04 vivid
Not affected
14.04 LTS trusty
Not affected
12.04 LTS precise
Not affected
sqlite3 15.10 wily
Not affected
15.04 vivid
Not affected
14.04 LTS trusty
Not affected
12.04 LTS precise
Not affected

Notes

mdeslaur

as of 2016-01-08, no details. Probably Apple-specific. Marking as not-affected.