TI-2019-03486 CVE-2019-5018 · GHSA-qgrg-5hv8-3w32
Use after free in Sqlite3
Priority MEDIUM 45
An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0.
RHSA-2020:4442
sqlite security update
Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) lemon-3.26.0-11.el8
- Red Hat Enterprise Linux BaseOS (v. 8) sqlite-3.26.0-11.el8, sqlite-devel-3.26.0-11.el8, sqlite-doc-3.26.0-11.el8 +1
Fixes 8 records
TI-2020-07456 CVE-2020-9327 · GHSA-43wf-f579-3w62
In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer…
Priority LOW 39
In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.
TI-2019-14578 CVE-2019-20218 · GHSA-vrgp-3vgj-937c
selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.
Priority LOW 39
selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.
TI-2019-12154 CVE-2019-16168 · GHSA-m2vp-56p6-9q2h
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or…
Priority LOW 36
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
TI-2020-05256 CVE-2020-6405 · GHSA-q7xq-9xwf-v39q
Out-of-bounds read in Google Chrome
Priority LOW 34
Out of bounds read in SQLite in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
TI-2020-10694 CVE-2020-13630 · GHSA-wgpm-4xgr-4mhp
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
Priority LOW 33
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
TI-2020-10696 CVE-2020-13632 · GHSA-vqf7-574h-2gf3
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
Priority LOW 26
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
TI-2020-10695 CVE-2020-13631 · GHSA-ggrr-j79r-pq3m
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its…
Priority LOW 26
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.