Security Bulletin: A security vulnerability has been identified in SQLite shipped with PowerAI

Summary

Vulnerability CVE-2019-8457 in SqLite package

Vulnerability Details

CVEID:CVE-2019-8457
**DESCRIPTION:**SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/161901 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Affected Products and Versions

Remediation/Fixes

For IBM PowerAI 1.5.4 and Watson Machine Learning Accelerator 1.1.2:

Download fix : http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FOther+software%2FIBM+PowerAI&fixids=powerai-security-fix-ppc64le-rhel-1.5.4&source=SAR

Install instructions: <https://www.ibm.com/support/pages/node/1135077&gt;

Workarounds and Mitigations

None