What’s Vulnerable › Vulnerabilities

CVE-2017-13685

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-29 · updated 2026-06-17
• Weakness: CWE-20

Description

The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file.

Affected products

• SQLite: 3.20.0

References

• http://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg105314.html
• http://www.securityfocus.com/bid/100521
• https://usn.ubuntu.com/4019-1/
• https://usn.ubuntu.com/4019-2/
• http://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg105314.html
• http://www.securityfocus.com/bid/100521
• https://usn.ubuntu.com/4019-1/
• https://usn.ubuntu.com/4019-2/

Get alerted when CVE-2017-13685 or the next vulnerability affects your stack