The vulnerability of the zipfile() function in the SQLite database management system allows a attacker to cause a service failure or execute arbitrary code.

🗓️ 15 Dec 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

The zipfile function in SQLite has a vulnerability causing service failure or code execution.

Reporter	Title	Published	Views	Family All 77
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Aug 202122:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by an SQLite vulnerability	9 Oct 202019:49	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in SQLite shipped with PowerAI.	1 Mar 202017:55	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in SQLite affects IBM Cloud Application Performance Management Response Time Monitoring Agent (CVE-2019-19959, CVE-2019-20218)	7 Apr 202013:30	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0111: sqlite (ALINUX3-SA-2022:0111)	14 May 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0121: mingw packages (ALINUX3-SA-2022:0121)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : sqlite (CESA-2020:1810)	1 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2020-1180)	25 Feb 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : sqlite (EulerOS-SA-2020-1364)	2 Apr 202000:00	–	nessus
Tenable Nessus	MiracleLinux 8 : sqlite-3.26.0-6.el8 (AXSA:2020-328:02)	20 Jan 202600:00	–	nessus

Vulners

Node

hipp_wyrick_company sqliteRange≤3.30.1

OR

oracle mysql_workbenchRange≤8.0.19

OR

canonical ubuntuMatch19.10

Source	Link
people	www.people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-19959.html
github	www.github.com/sqlite/sqlite/commit/d8f2d46cbc9925e034a68aaaf60aad788d9373c1
oracle	www.oracle.com/security-alerts/cpuapr2020.html
usn	www.usn.ubuntu.com/4298-1/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.1/
web	www.web.nvd.nist.gov/view/vuln/detail

17 Oct 2022 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 37.5

CVSS 27.8

EPSS0.03244

zipfile vulnerability sqlite database code execution service failure zip file handling