Description
In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
Remediation
References
Related Vulnerabilities
MySQL CVE-2017-10227 Vulnerability (CVE-2017-10227)
WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.19)
WordPress Plugin WORDPRESS VIDEO GALLERY Open Email Relay (2.8)
WordPress Plugin Adsense Extreme 'adsensextreme[lang]' Parameter Remote File Include (1.0.3)
WordPress Plugin Constant Contact for WordPress Unspecified Vulnerability (3.1.6)