sqlite: Fix of CVE-2018-8740

🗓️ 25 Apr 2026 08:45:58Reported by CloudLinuxType

sqlite: Fix CVE-2018-8740 to prevent null pointer dereference from corrupt CREATE TABLE AS entry in sqlite_master on Unix.

Reporter	Title	Published	Views	Family All 112
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in SQLite affects IBM Watson Studio Local	20 Dec 201914:02	–	ibm
IBM Security Bulletins	Security Bulletin: Public disclosed vulnerability from SQLite CVE-2018-8740	10 May 201914:33	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in SQLite affects IBM Cloud Application Performance Management Response Time Monitoring Agent and IBM Tivoli Composite Application Manager for Transactions (CVE-2018-8740)	21 Sep 201806:35	–	ibm
FreeBSD	SQLite -- Corrupt DB can cause a NULL pointer dereference	16 Mar 201800:00	–	freebsd
FreeBSD	SQLite -- Corrupt DB can cause a NULL pointer dereference	16 Mar 201800:00	–	freebsd
ATTACKERKB	CVE-2018-8740	17 Mar 201800:29	–	attackerkb
AlpineLinux	CVE-2018-8740	17 Mar 201800:00	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в sqlite	3 May 202623:59	–	astralinux
Cloud Foundry	USN-4205-1: SQLite vulnerabilities \| Cloud Foundry	18 Dec 201900:00	–	cloudfoundry
Cloud Foundry	USN-4394-1: SQLite vulnerabilities \| Cloud Foundry	24 Jun 202000:00	–	cloudfoundry

OS	OS Version	Architecture	Package	Package Version	Filename
Centos	6	x86_64	lemon	3.6.20	sqlite-3.6.20-1.el6_7.2.tuxcare.els4.src.rpm
Centos	6	i686	sqlite	3.6.20	sqlite-3.6.20-1.el6_7.2.tuxcare.els4.src.rpm
Centos	6	x86_64	sqlite	3.6.20	sqlite-3.6.20-1.el6_7.2.tuxcare.els4.src.rpm
Centos	6	i686	sqlite-devel	3.6.20	sqlite-3.6.20-1.el6_7.2.tuxcare.els4.src.rpm
Centos	6	x86_64	sqlite-devel	3.6.20	sqlite-3.6.20-1.el6_7.2.tuxcare.els4.src.rpm
Centos	6	x86_64	sqlite-doc	3.6.20	sqlite-3.6.20-1.el6_7.2.tuxcare.els4.src.rpm
Centos	6	x86_64	sqlite-tcl	3.6.20	sqlite-3.6.20-1.el6_7.2.tuxcare.els4.src.rpm

25 Apr 2026 08:45Current

6.2Medium risk

Vulners AI Score6.2

CVSS 25

CVSS 37.5

EPSS0.1384