oracle communications network charging and control 6.0.1 vulnerabilities and exploits

(subscribe to this query)

A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threa...

Sqlite Sqlite Oracle Communications Network Charging And Control Oracle Communications Network Charging And Control 6.0.1 Oracle Enterprise Manager For Oracle Database 13.4.0.0 Oracle Jd Edwards Enterpriseone Tools Oracle Mysql Workbench Oracle Outside In Technology 8.5.5 Oracle Zfs Storage Appliance Kit 8.8

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.

Sqlite Sqlite 3.32.2 Fedoraproject Fedora 33 Debian Debian Linux 9.0 Oracle Communications Messaging Server 8.1 Oracle Communications Network Charging And Control 6.0.1 Oracle Communications Network Charging And Control 12.0.2 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Hyperion Infrastructure Technology 11.1.2.4 Oracle Mysql Workbench Oracle Zfs Storage Appliance Kit 8.8 Siemens Sinec Infrastructure Network Services Netapp Cloud Backup -

In SQLite up to and including 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.

Sqlite Sqlite Netapp Ontap Select Deploy Administration Utility -Oracle Communications Network Charging And Control Oracle Communications Network Charging And Control 6.0.1 Oracle Communications Network Charging And Control 12.0.2 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Hyperion Infrastructure Technology 11.1.2.4 Oracle Mysql Oracle Mysql Workbench Oracle Outside In Technology 8.5.4 Oracle Outside In Technology 8.5.5 Oracle Zfs Storage Appliance Kit 8.8

In SQLite prior to 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.

Sqlite Sqlite Canonical Ubuntu Linux 20.04 Apple Icloud Apple Ipados Apple Iphone Os Apple Macos Apple Tvos Apple Watchos Oracle Communications Cloud Native Core Policy 1.14.0 Oracle Communications Messaging Server 8.1 Oracle Communications Network Charging And Control 6.0.1 Oracle Communications Network Charging And Control 12.0.2

SQLite up to and including 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.

Sqlite Sqlite Debian Debian Linux 8.0 Debian Debian Linux 9.0 Fedoraproject Fedora 32 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 20.04 Freebsd Freebsd Freebsd Freebsd 11.4 Freebsd Freebsd 12.0 Freebsd Freebsd 12.1

ext/fts3/fts3_snippet.c in SQLite prior to 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

Sqlite Sqlite Fedoraproject Fedora 32 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 20.04 Netapp Cloud Backup -Netapp Solidfire, Enterprise Sds & Hci Storage Node -Brocade Fabric Operating System -Netapp Hci Compute Node Firmware -Debian Debian Linux 9.0 Siemens Sinec Infrastructure Network Services

In SQLite 3.31.1, isAuxiliaryVtabOperator allows malicious users to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

Sqlite Sqlite 3.31.1 Netapp Cloud Backup -Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Siemens Sinec Infrastructure Network Services Oracle Communications Network Charging And Control Oracle Communications Network Charging And Control 6.0.1 Oracle Communications Network Charging And Control 12.0.2 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Hyperion Infrastructure Technology 11.1.2.4 Oracle Mysql Workbench

SQLite prior to 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

Sqlite Sqlite Fedoraproject Fedora 32 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 20.04 Netapp Cloud Backup -Netapp Solidfire, Enterprise Sds & Hci Storage Node -Brocade Fabric Operating System -Netapp Hci Compute Node Firmware -Siemens Sinec Infrastructure Network Services Apple Icloud

1 Github repository

ext/fts3/fts3.c in SQLite prior to 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.

Sqlite Sqlite Fedoraproject Fedora 32 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 20.04 Netapp Cloud Backup -Netapp Solidfire, Enterprise Sds & Hci Storage Node -Brocade Fabric Operating System -Netapp Hci Compute Node Firmware -Debian Debian Linux 9.0 Siemens Sinec Infrastructure Network Services

SQLite up to and including 3.31.1 allows malicious users to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

Sqlite Sqlite Netapp Ontap Select Deploy Administration Utility -Debian Debian Linux 8.0 Debian Debian Linux 9.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 20.04 Oracle Communications Element Manager Oracle Communications Network Charging And Control Oracle Communications Network Charging And Control 6.0.1 Oracle Communications Network Charging And Control 12.0.2

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook