Red Hat Security AdvisoryRHSA-2021:4396
sqlite security update
Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) lemon-3.26.0-15.el8
- Red Hat Enterprise Linux BaseOS (v. 8) sqlite-3.26.0-15.el8, sqlite-devel-3.26.0-15.el8, sqlite-doc-3.26.0-15.el8 +1
Fixes 5 records
Priority MEDIUM 46
SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.10983 · Published 2019-12-09 · Partial fix
Priority MEDIUM 42
Integer overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01912 · Published 2019-06-27 · Partial fix · 74.0.3729.131 CWE-190
Priority LOW 33
Uninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01999 · Published 2019-12-10 · Partial fix · 79.0.3945.79 CWE-908
Priority LOW 33
Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02408 · Published 2019-12-10 · Fixed in 79.0.3945.79 CWE-20
Priority LOW 26
SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0064 · Published 2020-05-24 · Partial fix CWE-476
THREATIST.IORead the docs