sqlite sqlite 3.30.1 vulnerabilities and exploits

(subscribe to this query)

ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.

Sqlite Sqlite 3.30.1 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.

Sqlite Sqlite 3.30.1 Siemens Sinec Infrastructure Network Services Apache Bookkeeper 4.12.1 Oracle Mysql Workbench Netapp Cloud Backup -

1 Github repository

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.

Sqlite Sqlite 3.30.1 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 19.10 Oracle Mysql Workbench Siemens Sinec Infrastructure Network Services

lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows malicious users to cause a denial of service or possibly have unspecified other impact.

Sqlite Sqlite 3.30.1 Netapp Cloud Backup -Netapp Ontap Select Deploy Administration Utility -Oracle Mysql Workbench Siemens Sinec Infrastructure Network Services

selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.

Sqlite Sqlite 3.30.1 Debian Debian Linux 9.0 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 16.04 Oracle Mysql Workbench

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.

Sqlite Sqlite 3.30.1 Oracle Mysql Workbench Siemens Sinec Infrastructure Network Services Siemens Sinec Infrastructure Network Services 1.0.1.1 Apache Guacamole 1.3.0 Netapp Cloud Backup -Netapp Ontap Select Deploy Administration Utility -

SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.

Sqlite Sqlite 3.30.1 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 19.10 Redhat Enterprise Linux 8.0 Oracle Mysql Workbench Siemens Sinec Infrastructure Network Services

exprListAppendList in window.c in SQLite 3.30.1 allows malicious users to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.

Sqlite Sqlite 3.30.1 Netapp Cloud Backup -Debian Debian Linux 9.0 Debian Debian Linux 10.0 Suse Package Hub -Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Opensuse Backports Sle 15.0 Opensuse Leap 15.1 Oracle Mysql Workbench Siemens Sinec Infrastructure Network Services

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).

Sqlite Sqlite 3.30.1 Siemens Sinec Infrastructure Network Services Oracle Mysql Workbench Debian Debian Linux 9.0 Debian Debian Linux 10.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Suse Package Hub -Opensuse Backports Sle 15.0 Opensuse Leap 15.1 Netapp Cloud Backup -

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.

Sqlite Sqlite 3.30.1 Siemens Sinec Infrastructure Network Services Oracle Mysql Workbench Debian Debian Linux 9.0 Debian Debian Linux 10.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Suse Package Hub -Opensuse Backports Sle 15.0 Opensuse Leap 15.1 Netapp Cloud Backup -

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook