Security Bulletin: Guardium StealthBits Integration is affected by an SQLite vulnerability

Summary IBM Security Guardium is aware of the following vulnerability Vulnerability Details CVEID: CVE-2019-9936 DESCRIPTION: SQLite could allow a remote attacker to obtain sensitive information, caused by a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c. By running specially-craft...

Ubuntu 16.04 LTS / 18.04 LTS : SQLite vulnerabilities (USN-4019-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4019-1 advisory. It was discovered that SQLite incorrectly handled certain SQL files. An attacker could possibly use this issue to execute arbitrary code or...

Ubuntu: Security Advisory (USN-4019-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4019-1: SQLite vulnerabilities

It was discovered that SQLite incorrectly handled certain SQL files. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. This issue only affected Ubuntu 16.04 LTS. CVE-2017-2518, CVE-2017-2520 It was discovered that SQLite incorrectly handled certain...

Fedora 29 : sqlite (2019-a01751837d)

Security fix for CVE-2019-5827, CVE-2019-9937, CVE-2019-9936 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Fedora 30 : sqlite (2019-8641591b3c)

Security fix for CVE-2019-5827, CVE-2019-9937, CVE-2019-9936 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Photon OS 1.0: Sqlite PHSA-2019-1.0-0228

An update of the sqlite package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0228. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid12486...

openSUSE Security Update : sqlite3 (openSUSE-2019-1372)

This update for sqlite3 to version 3.28.0 fixes the following issues : Security issues fixed : - CVE-2019-9936: Fixed a heap-based buffer over-read, when running fts5 prefix queries inside transaction bsc1130326. - CVE-2019-9937: Fixed a denial of service related to interleaving reads and writes ...

OPENSUSE-SU-2019:1372-1 Security update for sqlite3

This update for sqlite3 to version 3.28.0 fixes the following issues: Security issues fixed: - CVE-2019-9936: Fixed a heap-based buffer over-read, when running fts5 prefix queries inside transaction bsc1130326. - CVE-2019-9937: Fixed a denial of service related to interleaving reads and writes in...

SUSE SLED15 / SLES15 Security Update : sqlite3 (SUSE-SU-2019:1127-1)

This update for sqlite3 to version 3.28.0 fixes the following issues : Security issues fixed : CVE-2019-9936: Fixed a heap-based buffer over-read, when running fts5 prefix queries inside transaction bsc1130326. CVE-2019-9937: Fixed a denial of service related to interleaving reads and writes in a...

Photon OS 2.0 : libtiff / openjdk8 / ruby (PhotonOS-PHSA-2018-2.0-0013) (deprecated)

An update of 'libtiff', 'openjdk8', 'ruby' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0013. The text itself is copyrig...

CVE-2018-9937

Foxit Reader 9.0.0.29935 is affected by a vulnerability in the XFA subform parsing that can lead to remote code execution via type confusion when a user opens a malicious page or file. The flaw arises from improper validation of user-supplied data in subform elements, allowing an attacker to run ...

CVE-2017-9937

CVE-2017-9937 : LibTIFF 4.0.8 has a memory malloc failure in tif_jbig.c that can be triggered by a crafted TIFF document, leading to a remote denial of service (abort). No additional exploit specifics or mitigations are provided in the connected documents.

CVE-2016-9937

An issue was discovered in Asterisk Open Source 13.12.x and 13.13.x before 13.13.1 and 14.x before 14.2.1. If an SDP offer or answer is received with the Opus codec and with the format parameters separated using a space the code responsible for parsing will recursively call itself until it crashe...

CVE-2016-9937

CVE-2016-9937 affects Asterisk Open Source versions 13.12.x and 13.13.x before 13.13.1 and 14.x before 14.2.1. When an SDP offer/answer contains Opus and parameters separated by spaces, the Opus SDP parser recurses and crashes, causing a denial of service. The issue is remote and unauthenticated,...