SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process via count(*) over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can trigger deeply nested TK_PLUS expressions whose recursive freeing in sqlite3ExprDeleteNN() exhausts the C stack, causing denial of service.

Etkilenen sürümler1 yazılım

Kaynaklar10 kaynak

• CVE.org kaydı
• NVD kaydı
• sqlite.org/src/info/ab621a3e11ee4acc Yama
• github.com/…ommit/eff50a067c55f972909e7780e506e91382d08de2 Yama
• sqlite.org/bugs/info/2026-10-04T05:34:47Z Üçüncü taraf
• abraxaslabs.tech/research/sqlite-values-union Üçüncü taraf
• vulncheck.com/…n-via-countofviewoptimization-in-values-clause Üçüncü taraf
• github.com/sqlite/sqlite/blob/version-3.53.4/src/select.c Diğer
• sqlite.org/releaselog/3_54_0.html Diğer
• github.com/sqlite/sqlite Diğer

Kayıt geçmişi

1. 30 Eki 2026 14:31Yayımlandı

İlgili açıklar

• 7,8 CVE-2026-119586SQLite CLI through 3.54.1 Command Injection via .recover Output
• 7,8 CVE-2026-119379SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()
• 5,5 CVE-2026-119378SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()
• 5,5 CVE-2026-119376SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator Chain
• 2,5 CVE-2026-119377SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING
• 5,5 CVE-2026-119375SQLite before 3.54.0 Information Disclosure via WAL Page Size Mismatch