TI-2019-06073 CVE-2019-8457 · GHSA-p4jx-5p2x-4pq7
Out-of-bounds read in SQLite
Priority HIGH 72
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
RHSA-2020:1810
sqlite security and bug fix update
Released 2020-04-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) lemon-3.26.0-6.el8
- Red Hat Enterprise Linux BaseOS (v. 8) sqlite-3.26.0-6.el8, sqlite-devel-3.26.0-6.el8, sqlite-doc-3.26.0-6.el8 +1
Fixes 7 records
TI-2019-14371 CVE-2019-19925 · GHSA-wcjr-83cc-7pfq
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.
Priority MEDIUM 43
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.
TI-2019-14369 CVE-2019-19923 · GHSA-5gmx-grg5-hh7x
flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT…
Priority MEDIUM 43
flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view.
TI-2019-14397 CVE-2019-19959 · GHSA-8q6c-j3g3-gr6j
ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations…
Priority LOW 39
ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrin…
TI-2019-14370 CVE-2019-19924 · GHSA-mp99-gxqh-6752
SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and…
Priority LOW 37
SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c.
TI-2019-10356 CVE-2019-13753 · GHSA-9vwm-wj9h-8v65
Out-of-bounds read in Google Chrome
Priority LOW 32
Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
TI-2019-10355 CVE-2019-13752 · GHSA-6j2q-6rx5-qvh8
Out-of-bounds read in Google Chrome
Priority LOW 32
Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.